Page 1 of 7 



* NOTICES * 

Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2 **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[The technical field to which invention belongs] This invention relates to the signature document 
communication device for carrying out exchange of a document and registration of a document to safety 
in the so-called distributed processing system which aims at improvement in the engine performance or 
reliability by connecting an information processor or an telecommunications system in a network, and 
distributing processing among them. 
[0002] 

[Description of the Prior Art] It is related with the digital signature method in distributed processing, and 
is Bruce. Schneier work Applied Cryptography Second There are some which were indicated by Edition 
(WIELY). Drawing 19 is a block diagram showing the component. As for document transmitting-side 
equipment and 2, in drawing, 1 is [ document receiving-side equipment and 4 ] channels. Document 
transmitting-side equipment 1 consists of the document editorial department 5 which edits a document, 
the digital signature generation section 6 which acquires a digital signature from the document after edit, 
a digital signature adjunct 1 5 which adds the generated digital signature to a document, and the 
document transmitting section 16 with a digital signature which transmits a document with a digital 
signature. 

[0003] Moreover, receiving-side equipment 2 consists of the document receive section 18 with a digital 
signature which receives a document with a digital signature from a channel, the digital signature 
separation section 17 which separates the received document with a digital signature to a digital 
signature, and a document, the digital signature verification section 9 which performs alteration of a 
document, and implementer authentication of a document using a digital signature, and the document 
editorial department 5 which edits the document after verification. 

[0004] Drawing 20 is drawing in which the document with a digital signature generated with document 
transmitting-side equipment 1 shows the flow transmitted to document receiving-side equipment 2. 
[0005] Drawing 21 and drawing 22 are the flow charts which show the flow of processing of document 
transmitting-side equipment 1 and document receiving-side equipment 2, drawing 21 shows processing 
with document transmitting-side equipment 1 , and drawing 22 shows processing with document 
receiving-side equipment 2. 

[0006] Hereafter, actuation of document transmitting-side equipment 1 is explained, referring to 
drawing. As shown in drawing 21 , in document transmitting-side equipment 1 , the document editorial 
department 5 generates a document at step S151. Next, the digital signature generation section 6 
generates the message digest (henceforth, MD) of a document using a one-way function at step SI 52 
from the generated document. In step SI 53, a digital signature is generated from generated MD. A 
digital signature is generated by enciphering using a private key [ in / for MD / a document addressee's 
public key cryptosystem ]. The digital signature adjunct 15 is step SI 54, and the digital signature of a 
document is added to a document. The document with a digital signature is transmitted to a channel 4 in 
step SI 55 by the document transmitting section 16 with a digital signature. 
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[0007] Next, processing of document receiving-side equipment 2 is explained. As shown in drawing 22 , 
in document receiving-side equipment 2, the document receive section 18 with a digital signature 
receives a document with a digital signature at step SI 61 . The received document with a digital 
signature is separation ******** (step SI 62) to a digital signature and a document at the digital 
signature separation section 17. The separated digital signature is decrypted with a transmitting person's 
public key in a public key cryptosystem in the digital signature verification section 9 (step SI 63). 
Regeneration of the MD is carried out from the document furthermore received (step SI 64). The value 
of MD which decrypted the digital signature and was obtained in step SI 63, and MD by which 
regeneration was carried out at step SI 64 is compared (step SI 65). If both are in agreement as a result of 
a comparison, it will become clear that the transmitting person drew up the document and that the 
alteration to a creation backward document is not performed (step SI 66), and when not in agreement, it 
becomes clear that the alteration to a document was performed (step SI 67). 
[0008] 

[Problem(s) to be Solved by the Invention] When the digital signature method currently used for the 
conventional electronic mail was applied to the file on the file system which OS's, such as UNIX and 
MS-Windows, treat and a digital signature was added and distributed [ saved and ] to a file, since the 
structure of a file changed by adding a digital signature, the application which created the file before a 
digital signature is added had a trouble of it becoming impossible to process the file to which the digital 
signature was added. 

[0009] This invention was made in order to solve this trouble, and it aims at offering the signature 
document communication device separated and processed, without making a digital signature add to a 
file. 

[0010] moreover - although enclosure with big storage capacity is needed when storing and managing 
the file to which the digital signature was added in the engine proving what the document was drawn up 
for by him - a certification engine - a digital signature - storing -- a document - an implementer « it 
aims at offering the signature document communication device which cancels the trouble that a 
certification engine needs mass enclosure that he should just store in his equipment. 
[0011] 

[Means for Solving the Problem] The signature document communication device concerning invention 
according to claim 1 is characterized by to have the document transmitting-side equipment which 
generates a digital signature from this document while generating a document, separates a document and 
a digital signature, and is transmitted, the document verification information-management equipment 
which stores while receiving a digital signature, and document receiving-side equipment which verify a 
document using a digital signature stored in document verification information-management equipment 
while receiving a document. 

[0012] A signature document communication device concerning invention according to claim 2 is 
characterized by using for document verification information management equipment a hash value of a 
message digest (henceforth, MD) used for digital signature creation, or MD as an index for searching a 
digital signature in a signature document communication device according to claim 1 . 
[0013] In a signature document communication device according to claim 1, document verification 
information management equipment makes a hash value of MD or MD an index, and a signature 
document communication device concerning invention according to claim 3 is characterized by 
including an item which specifies a document as a storing item corresponding to the index in addition to 
a digital signature. 

[0014] A signature document communication device concerning invention according to claim 4 is 
characterized by document verification information management equipment including an item which 
pinpoints a storing location of a document as a storing item in addition to a digital signature in a 
signature document communication device according to claim 3. 

[0015] A signature document communication device concerning invention according to claim 5 is 
characterized by document verification information management equipment including storing positional 
information of a document which is referring to a document as a storing item in addition to a digital 
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signature in a signature document communication device according to claim 3. 

[0016] A signature document communication device concerning invention according to claim 6 is 

characterized by document verification information management equipment containing MD of a 

document which is referring to a document as a storing item corresponding to the index in addition to a 

digital signature in a signature document communication device according to claim 3. 

[0017] A signature document communication device concerning invention according to claim 7 is 

characterized by document verification information management equipment containing storing 

positional information and MD of a document which is referring to a document as a storing item 

corresponding to the index in addition to a digital signature in a signature document communication 

device according to claim 3. 

[0018] A signature document communication device concerning invention according to claim 8 is 
characterized by document verification information management equipment including key information 
used for a code and decode processing in addition to said digital signature as a storing item 
corresponding to the index, and an item stored in the index in a signature document communication 
device according to claim 3. 

[0019] In a signature document communication device according to claim 3, document verification 
information management equipment makes a hash value of MD an index, and a signature document 
communication device concerning invention according to claim 9 is characterized by the ability to set up 
an expiration date to an item stored in the index. 
[0020] 

[Embodiment of the Invention] 

The gestalt 1 of implementation of this invention is explained about drawing below gestalt 1 . of 
operation. Drawing 1 is drawing showing the configuration of the gestalt 1 of operation of this 
invention, and, for 1, as for document receiving-side equipment and 3, document transmitting-side 
equipment and 2 are [ document verification information management equipment and 4 ] channels in 
drawing. Document transmitting-side equipment 1 consists of the document editorial department 5 
which edits a document, the digital signature generation section 6 which acquires a digital signature 
from the document after edit, the digital signature transmitting section 7 which transmits the generated 
digital signature to document verification information management equipment 3, and the document 
transmitting section 8 which transmits a document. 

[0021] Moreover, document receiving-side equipment 2 consists of the digital signature acquisition 
section 10 which receives a digital signature from document verification information management 
equipment 3, a document receive section 1 1 which receives the document which document transmitting- 
side equipment 1 transmitted, the digital signature verification section 9 which performs alteration of a 
document, and implementer authentication of a document using a digital signature, and the document 
editorial department 5 which edits the document after verification. 

[0022] Moreover, document verification information management equipment 3 consists of the digital 
signature storing processing section 12 for storing the digital signature which received from document 
transmitting-side equipment and a digital signature storing field 14, and the digital signature retrieval 
section 13 according to the digital signature retrieval demand from document receiving-side equipment. 
[0023] Drawing 2 shows signs that it is transmitted to document receiving- side equipment 2 and the 
document verification information enclosure 3, respectively, document receiving-side equipment 2 
acquires a digital signature from document enclosure, and the document and digital signature which 
were generated with document transmitting-side equipment 1 verify the received document. 
[0024] Drawing 3 and drawing 4 are the flow charts which show processing of document transmitting- 
side equipment 1 and document receiving-side equipment 2, and drawing 5 is a flow chart in document 
verification information management equipment 3 which shows the flow of processing. 
[0025] Hereafter, actuation in case the document receiving-side equipment 2 which received the 
document drawn up with document transmitting-side equipment 1 verifies a document is explained, 
referring to drawing. 

[0026] Actuation of the document transmitting-side equipment 1 first shown in the flow chart of 
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drawing 4 is explained. With document transmitting-side equipment 1, the document editorial 
department 5 generates a document (step S31). Next, the digital signature generation section 6 generates 
MD of a document using a one-way function from the generated document (step S32). A digital 
signature is generated from generated MD (step S33). The digital signature of a document is transmitted 
to document verification information management equipment 3 with the information used by the digital 
signature transmitting section 7 as index information at the time of storing (step S34). A document is 
transmitted to document receiving-side equipment 2 by the document transmitting section 7 (step S35). 
[0027] Next, actuation of the document receiving-side equipment 2 shown in the flow chart of drawing 4 
is explained. Document receiving-side equipment 2 receives the document which document 
transmitting-side equipment 2 transmitted in the document receive section 1 1 (step S41). Next, MD is 
acquired from the document received in the digital signature verification section 9 (step S42). Next, a 
digital signature retrieval demand is sent out to document verification information management 
equipment 3 (step S43). Next, the digital signature acquisition section 10 acquires a digital signature 
from document verification information management equipment 3 (step S44). The acquired digital 
signature is decrypted with a transmitting person's public key in a public key cryptosystem in the digital 
signature verification section 9 (step S45). The value of MD which decrypted the digital signature and 
was obtained in step S45, and MD by which regeneration was carried out at step S42 is compared (step 
S46). As a result of a comparison, if both are in agreement, it will become clear that the transmitting 
person drew up the document and that the alteration to a creation backward document is not performed 
(step S47), and when not in agreement, it becomes clear that the alteration to a document was performed 
(step S48). 

[0028] Next, actuation of drawing 5 and the document verification information management equipment 
3 shown in the flow chart of drawing 6 is explained. Digital signature storing actuation first shown in the 
flow chart of drawing 5 is explained. If the information containing the digital signature transmitted by 
step S34 ( drawing 3 ) from document transmitting-side equipment 1 is received (step S51), document 
verification information management equipment 3 generates index information from the information 
received with the digital signature, and stores a digital signature (step S52). 

[0029] Next, actuation of the response to the digital signature retrieval demand shown in the flow chart 
of drawing 6 is explained. If digital signature retrieval demand reception is carried out (step S61), 
document verification information management equipment 3 will search the digital signature which was 
sent out in step S43 ( drawing 4 ) from document receiving-side equipment 2 and which fills a retrieval 
demand, and will return it to document receiving-side equipment 2 by considering the digital signature 
which fills a demand as a response (step S62). 

[0030] As mentioned above, alteration verification of that file and implementer authentication can be 
enabled, enabling processing of the application which created the file to the file on a file system 
according to the gestalt 1 of this operation. Moreover, it becomes possible to have a guarantee function 
to the contents of the document by storing and managing only the digital signature of a document also in 
the documentation-management engine which does not hold mass information enclosure. 
[0031] Gestalt 2. drawing 7 of operation is drawing showing the contents of the verification information 
storing field of the document verification information management equipment in the gestalt 2 of 
implementation of this invention, and drawing 8 and drawing 9 are flow charts which show processing. 
Drawing 8 corresponds to the storing processing (step S34 of drawing 3 ) to the document verification 
information management equipment 3 of a digital signature in document transmitting-side equipment 1 . 
Moreover, drawing 9 corresponds to the digital signature storing processing (step S52 of drawing 5 ) in 
document verification information management equipment 3. 

[0032] In document transmitting-side equipment 1 , in case a digital signature is stored in document 
verification information management equipment 3, the digital signature created from MD and its MD is 
sent out to document verification information management equipment 3 (step S81). The hash value of 
MD is calculated (step S92), and document verification information management equipment 3 stores a 
digital signature in a digital signature storing field by making the calculated hash value into an index, if 
MD and a digital signature are received (step S91) (step S93). The drawing 7 left part is MD and the 
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digital signature which are sent out from document transmitting-side equipment 1 in step S81, and the 
drawing 7 right part expresses MD and the digital signature which were stored in the verification 
information storing field in step S93. 

[0033] As mentioned above, it becomes possible to search a digital signature efficiently by according to 
the gestalt of this operation, storing in a digital signature storing field by making into an index the hash 
value of MD which serves as a basis of a digital signature in a digital signature, and storing additionally 
the information for specifying the digital signature demanded when two or more digital signatures 
existed to a single index. 

[0034] Gestalt 3. drawing 10 of operation is drawing showing the contents of the verification 
information storing field of the document verification information management equipment in the gestalt 

3 of implementation of this invention. The flow of processing is explained using the flow chart shown in 
drawing 1 1 , drawing 12 , drawing 13 , and drawing 14 . 

[0035] Drawing 1 1 corresponds to the storing processing (step S34 of drawing 3 ) to the document 
verification information management equipment 3 of a digital signature in document transmitting-side 
equipment 1. Drawing 12 corresponds to the digital signature storing processing (step S52 of drawing 
5 ) in document verification information management equipment 3. Drawing 13 corresponds to the 
retrieval demand sending-out processing (step S43 of drawing 4 ) in document receiving-side equipment 
2. Drawing 14 corresponds to the digital signature retrieval demand response processing ( drawing 6 ) in 
document verification information management equipment 3. 

[0036] In document transmitting-side equipment 1, in case a digital signature is stored in document 
verification information management equipment 3, three items of the digital signature created from MD 
of MD ** and the creation name of a digital signature are sent out to document verification information 
management equipment 3 (step Sill). The hash value of MD is calculated (step SI 22), and document 
verification information management equipment 3 stores **** of a digital signature and a name in a 
digital signature storing field by making the calculated hash value into an index, if MD, a digital 
signature, and a name are received (step S121) (step SI 23). The drawing 10 left parts are MD sent out 
from document transmitting-side equipment 1 in step SI 1 1, a digital signature, and a name, and the 
drawing 10 right part expresses MD stored in the verification information storing field in step SI 23, the 
digital signature, and the name. 

[0037] In step S43, document receiving-side equipment 2 includes the author of MD calculated at step 
S43, and the received document in a digital signature retrieval demand, and sends him out to document 
verification information management equipment 3 (step S131). The document verification information 
management equipment 3 which received the digital signature retrieval demand calculates the hash 
value of MD contained in a retrieval demand (step S141). Next, it investigates whether **** containing 
the author name of the digital signature of the digital signature which makes an index the calculated 
hash value, and a name which constructs and is contained in a retrieval demand in inside exists (step 
S142). When it exists, it answers document receiving-side equipment 2 by considering only the 
corresponding group Mika digital signatures of the author name of a digital signature and a digital 
signature as a retrieval demand response (step SI 43). When it does not exist, it answers document 
receiving-side equipment by considering NULL as a retrieval demand response (step SI 44). 
[0038] Gestalt 4. drawing 15 of operation is drawing showing the contents of the verification 
information storing field of the document verification information-management equipment in the gestalt 

4 of implementation of this invention, sends out the MD and the document location where document 
transmitting-side equipment 1 serves as the basis of a digital signature at a digital-signature storing 
demand with a digital signature, and shows signs that the document verification information- 
management equipment 3 which received them stores a digital signature and a document location in a 
digital-signature storing field 14 by making the hash value of MD into an index. 

[0039] As mentioned above, since the positional information of a document was added to the storing 
item according to the gestalt of this operation, document transmitting-side equipment 1 does not send 
the substance of a document to document receiving-side equipment 2, but it is only that ** also sends 
MD, and document receiving-side equipment 2 can acquire the document which document transmitting- 
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side equipment 1 drew up based on that MD, and it can lessen information sent to document receiving- 
side equipment 2 from document transmitting-side equipment 1 . 

[0040] Gestalt 5. drawing 16 of operation is drawing showing the contents of the verification 
information storing field of the document verification information management equipment in the gestalt 

5 of implementation of this invention. MD from which document transmitting-side equipment 1 
becomes a digital signature storing demand with the basis of a digital signature, MD of the document 
which the drawn-up document refers to is sent out with a digital signature, and signs that MD of the 
document which the document verification information management equipment 3 which received them 
referred to with the digital signature by making the hash value of MD into an index to the digital 
signature storing field 14 is stored are shown. Signs that the document whose MD is MD1 is specifically 
referring to the document whose MD is MD3 are shown. 

[0041] As mentioned above, since MD of the document which the document is referring to was added to 
the storing item according to the gestalt of this operation, a document and the document currently 
referred to can be connected. 

[0042] Gestalt 6. drawing 17 of operation is drawing showing the contents of the verification 
information storing field of the document verification information management equipment in the gestalt 

6 of implementation of this invention. MD from which document transmitting-side equipment 1 
becomes a digital signature storing demand with the basis of a digital signature, The document location 
of the document which MD of the document which the drawn-up document refers to, and the drawn-up 
document refer to is sent out with a digital signature. MD of the document which the document 
verification information management equipment 3 which received them referred to with the digital 
signature by making the hash value of MD into an index to the digital signature storing field 14, and 
signs that a document location is stored are shown. Specifically, the document location whose MD the 
document whose MD is MD1 is MD3 shows signs that the document of the document location 3 is 
referred to. 

[0043] As mentioned above, since MD of the document which the document is referring to, and the 
positional information of the document which the document is referring to were added to the storing 
item according to the gestalt of this operation, document receiving-side equipment 2 can acquire and 
verify the document which not only the verification of a document that received but the received 
document is referring to. 

[0044] Gestalt 7. drawing 1 8 of operation is drawing showing the contents of the verification 
information storing field of the document verification information management equipment in the gestalt 

7 of implementation of this invention. MD from which document transmitting-side equipment 1 
becomes a digital signature storing demand with the basis of a digital signature, The key used for a 
decryption in case the document is enciphered is sent out with a digital signature, and signs that the 
document verification information management equipment 3 which received them stores a digital 
signature and a key in the digital signature storing field 14 by making the hash value of MD into an 
index are shown. Signs that the key 1 specifically used for a decryption of the enciphered document 
whose MD is MD1 is stored in the digital signature storing field 14 are shown. 

[0045] As mentioned above, since the key information used for a decryption of the document enciphered 
was added to the storing item according to the gestalt of this operation, encryption of the document 
which can decrypt only within an expiration date is attained by preparing an expiration date, for example 
in a storing item. 
[0046] 

[Effect of the Invention] The signature document communication device concerning invention according 
to claim 1 While receiving the document transmitting-side equipment which generates a digital signature 
from this document while generating a document, separates a document and a digital signature, and is 
transmitted, and a digital signature Since it was made the configuration equipped with the document 
verification information management equipment to store and the document receiving-side equipment 
which verifies a document using the digital signature stored in document verification information 
management equipment while receiving a document Alteration verification of the file and implementer 
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authentication can be enabled, enabling processing of the application which created the file to the file on 
a file system. Moreover, it becomes possible to have a guarantee function to the contents of the 
document by storing and managing only the digital signature of a document also in the documentation- 
management engine which does not hold mass information enclosure. 

[0047] Since the hash value of the message digest (henceforth, MD) by which the signature document 
communication device concerning invention according to claim 2 was used for digital signature creation 
as an index for document verification information management equipment to search a digital signature, 
or MD is used, it becomes possible to search a digital signature efficiently. 

[0048] Since document verification information management equipment includes the item which makes 
the hash value of MD or MD an index, and specifies a document as a storing item corresponding to the 
index in addition to a digital signature, the signature document communication device concerning 
invention according to claim 3 becomes possible [ searching a digital signature efficiently ]. 
[0049] Since document verification information management equipment includes the item which 
pinpoints the storing location of a document as a storing item in addition to a digital signature, the 
signature document communication device concerning invention according to claim 4 can connect a 
document and the document currently referred to. 

[0050] Since document verification information management equipment includes the storing positional 
information of the document which is referring to the document as a storing item in addition to a digital 
signature, the signature document communication device concerning invention according to claim 5 can 
lessen information sent to document receiving-side equipment from document transmitting-side 
equipment. 

[0051] Since document verification information management equipment contains MD of a document 
which is referring to the document as a storing item corresponding to the index in addition to a digital 
signature, the signature document communication device concerning invention according to claim 6 can 
connect a document and the document currently referred to. 

[0052] Since the signature document communication device concerning invention according to claim 7 
contains the storing positional information and MD of a document which are referring to the document 
as a storing item corresponding to the index in addition to a digital signature, document receiving-side 
equipment can acquire and verify the document which not only the verification of a document that 
received but the received document is referring to. 

[0053] Since the signature document communication device concerning invention according to claim 8 
includes the key information used for a code and decode processing in addition to a digital signature as 
the storing item corresponding to the index, and an item stored in the index, it can store key information 
required for a decryption of the enciphered document which is verified by the digital signature in 
document verification information management equipment. 

[0054] Document verification information management equipment makes the hash value of MD an 
index, and since the signature document communication device concerning invention according to claim 
9 can set up an expiration date to the item stored in the index, the encryption of the document which can 
decrypt only within an expiration date of it is attained. 
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EFFECT OF THE INVENTION 



[Effect of the Invention] The signature document communication device concerning invention according 
to claim 1 , While receiving the document transmitting-side equipment which generates a digital 
signature from this document while generating a document, separates a document and a digital signature, 
and is transmitted, and a digital signature Since it was made the configuration equipped with the 
document verification information management equipment to store and the document receiving-side 
equipment which verifies a document using the digital signature stored in document verification 
information management equipment while receiving a document Alteration verification of the file and 
implementer authentication can be enabled, enabling processing of the application which created the file 
to the file on a file system. Moreover, it becomes possible to have a guarantee function to the contents of 
the document by storing and managing only the digital signature of a document also in the 
documentation-management engine which does not hold mass information enclosure. 
[0047] Since the hash value of the message digest (henceforth, MD) by which the signature document 
communication device concerning invention according to claim 2 was used for digital signature creation 
as an index for document verification information management equipment to search a digital signature, 
or MD is used, it becomes possible to search a digital signature efficiently. 

[0048] Since document verification information management equipment includes the item which makes 
the hash value of MD or MD an index, and specifies a document as a storing item corresponding to the 
index in addition to a digital signature, the signature document communication device concerning 
invention according to claim 3 becomes possible [ searching a digital signature efficiently ]. 
[0049] Since document verification information management equipment includes the item which 
pinpoints the storing location of a document as a storing item in addition to a digital signature, the 
signature document communication device concerning invention according to claim 4 can connect a 
document and the document currently referred to. 

[0050] Since document verification information management equipment includes the storing positional 
information of the document which is referring to the document as a storing item in addition to a digital 
signature, the signature document communication device concerning invention according to claim 5 can 
lessen information sent to document receiving- side equipment from document transmitting-side 
equipment. 

[0051] Since document verification information management equipment contains MD of a document 
which is referring to the document as a storing item corresponding to the index in addition to a digital 
signature, the signature document communication device concerning invention according to claim 6 can 
connect a document and the document currently referred to. 

[0052] Since the signature document communication device concerning invention according to claim 7 
contains the storing positional information and MD of a document which are referring to the document 
as a storing item corresponding to the index in addition to a digital signature, document receiving-side 
equipment can acquire and verify the document which not only the verification of a document that 
received but the received document is referring to. 

[0053] Since the signature document communication device concerning invention according to claim 8 
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includes the key information used for a code and decode processing in addition to a digital signature as 
the storing item corresponding to the index, and an item stored in the index, it can store key information 
required for a decryption of the enciphered document which is verified by the digital signature in 
document verification information management equipment. 

[0054] Document verification information management equipment makes the hash value of MD an 
index, and since the signature document communication device concerning invention according to claim 
9 can set up an expiration date to the item stored in the index, the encryption of the document which can 
decrypt only within an expiration date of it is attained. 
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TECHNICAL PROBLEM 



[Problem(s) to be Solved by the Invention] When the digital signature method currently used for the 
conventional electronic mail was applied to the file on the file system which OS's, such as UNIX and 
MS-Windows, treat and a digital signature was added and distributed [ saved and ] to a file, since the 
structure of a file changed by adding a digital signature, the application which created the file before a 
digital signature is added had a trouble of it becoming impossible to process the file to which the digital 
signature was added. 

[0009] This invention was made in order to solve this trouble, and it aims at offering the signature 
document communication device separated and processed, without making a digital signature add to a 
file. 

[0010] moreover although enclosure with big storage capacity is needed when storing and managing 
the file to which the digital signature was added in the engine proving what the document was drawn up 
for by him a certification engine -- a digital signature - storing a document an implementer - it 
aims at offering the signature document communication device which cancels the trouble that a 
certification engine needs mass enclosure that he should just store in his equipment. 
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MEANS 



[Means for Solving the Problem] The signature document communication device concerning invention 
according to claim 1 is characterized by to have the document transmitting-side equipment which 
generates a digital signature from this document while generating a document, separates a document and 
a digital signature, and is transmitted, the document verification information-management equipment 
which stores while receiving a digital signature, and document receiving-side equipment which verify a 
document using a digital signature stored in document verification information-management equipment 
while receiving a document. 

[0012] A signature document communication device concerning invention according to claim 2 is 
characterized by using for document verification information management equipment a hash value of a 
message digest (henceforth, MD) used for digital signature creation, or MD as an index for searching a 
digital signature in a signature document communication device according to claim 1 . 
[0013] In a signature document communication device according to claim 1, document verification 
information management equipment makes a hash value of MD or MD an index, and a signature 
document communication device concerning invention according to claim 3 is characterized by 
including an item which specifies a document as a storing item corresponding to the index in addition to 
a digital signature. 

[0014] A signature document communication device concerning invention according to claim 4 is 
characterized by document verification information management equipment including an item which 
pinpoints a storing location of a document as a storing item in addition to a digital signature in a 
signature document communication device according to claim 3. 

[0015] A signature document communication device concerning invention according to claim 5 is 
characterized by document verification information management equipment including storing positional 
information of a document which is referring to a document as a storing item in addition to a digital 
signature in a signature document communication device according to claim 3. 
[0016] A signature document communication device concerning invention according to claim 6 is 
characterized by document verification information management equipment containing MD of a 
document which is referring to a document as a storing item corresponding to the index in addition to a 
digital signature in a signature document communication device according to claim 3. 
[0017] A signature document communication device concerning invention according to claim 7 is 
characterized by document verification information management equipment containing storing 
positional information and MD of a document which is referring to a document as a storing item 
corresponding to the index in addition to a digital signature in a signature document communication 
device according to claim 3. 

[0018] A signature document communication device concerning invention according to claim 8 is 
characterized by document verification information management equipment including key information 
used for a code and decode processing in addition to said digital signature as a storing item 
corresponding to the index, and an item stored in the index in a signature document communication 
device according to claim 3. 
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[0019] In a signature document communication device according to claim 3, document verification 
information management equipment makes a hash value of MD an index, and a signature document 
communication device concerning invention according to claim 9 is characterized by the ability to set up 
an expiration date to an item stored in the index. 
[0020] 

[Embodiment of the Invention] 

The gestalt 1 of implementation of this invention is explained about drawing below gestalt 1 . of 
operation. Drawing 1 is drawing showing the configuration of the gestalt 1 of operation of this 
invention, and, for 1, as for document receiving-side equipment and 3, document transmitting-side 
equipment and 2 are [ document verification information management equipment and 4 ] channels in 
drawing. Document transmitting-side equipment 1 consists of the document editorial department 5 
which edits a document, the digital signature generation section 6 which acquires a digital signature 
from the document after edit, the digital signature transmitting section 7 which transmits the generated 
digital signature to document verification information management equipment 3, and the document 
transmitting section 8 which transmits a document. 

[0021] Moreover, document receiving-side equipment 2 consists of the digital signature acquisition 
section 10 which receives a digital signature from document verification information management 
equipment 3, a document receive section 1 1 which receives the document which document transmitting- 
side equipment 1 transmitted, the digital signature verification section 9 which performs alteration of a 
document, and implementer authentication of a document using a digital signature, and the document 
editorial department 5 which edits the document after verification. 

[0022] Moreover, document verification information management equipment 3 consists of the digital 
signature storing processing section 12 for storing the digital signature which received from document 
transmitting-side equipment and a digital signature storing field 14, and the digital signature retrieval 
section 13 according to the digital signature retrieval demand from document receiving-side equipment. 
[0023] Drawing 2 shows signs that it is transmitted to document receiving-side equipment 2 and the 
document verification information enclosure 3, respectively, document receiving-side equipment 2 
acquires a digital signature from document enclosure, and the document and digital signature which 
were generated with document transmitting-side equipment 1 verify the received document. 
[0024] Drawing 3 and drawing 4 are the flow charts which show processing of document transmitting- 
side equipment 1 and document receiving-side equipment 2, and drawing 5 is a flow chart in document 
verification information management equipment 3 which shows the flow of processing. 
[0025] Hereafter, actuation in case the document receiving-side equipment 2 which received the 
document drawn up with document transmitting-side equipment 1 verifies a document is explained, 
referring to drawing. 

[0026] Actuation of the document transmitting-side equipment 1 first shown in the flow chart of 
drawing 4 is explained. With document transmitting-side equipment 1, the document editorial 
department 5 generates a document (step S3 1). Next, the digital signature generation section 6 generates 
MD of a document using a one-way function from the generated document (step S32). A digital 
signature is generated from generated MD (step S33). The digital signature of a document is transmitted 
to document verification information management equipment 3 with the information used by the digital 
signature transmitting section 7 as index information at the time of storing (step S34). A document is 
transmitted to document receiving-side equipment 2 by the document transmitting section 7 (step S3 5). 
[0027] Next, actuation of the document receiving-side equipment 2 shown in the flow chart of drawing 4 
is explained. Document receiving-side equipment 2 receives the document which document 
transmitting-side equipment 2 transmitted in the document receive section 1 1 (step S41). Next, MD is 
acquired from the document received in the digital signature verification section 9 (step S42). Next, a 
digital signature retrieval demand is sent out to document verification information management 
equipment 3 (step S43). Next, the digital signature acquisition section 10 acquires a digital signature 
from document verification information management equipment 3 (step S44). The acquired digital 
signature is decrypted with a transmitting person's public key in a public key cryptosystem in the digital 
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signature verification section 9 (step S45). The value of MD which decrypted the digital signature and 
was obtained in step S45, and MD by which regeneration was carried out at step S42 is compared (step 
S46). As a result of a comparison, if both are in agreement, it will become clear that the transmitting 
person drew up the document and that the alteration to a creation backward document is not performed 
(step S47), and when not in agreement, it becomes clear that the alteration to a document was performed 
(step S48). 

[0028] Next, actuation of drawing 5 and the document verification information management equipment 
3 shown in the flow chart of drawing 6 is explained. Digital signature storing actuation first shown in the 
flow chart of drawing 5 is explained. If the information containing the digital signature transmitted by 
step S34 ( drawing 3 ) from document transmitting-side equipment 1 is received (step S51), document 
verification information management equipment 3 generates index information from the information 
received with the digital signature, and stores a digital signature (step S52). 

[0029] Next, actuation of the response to the digital signature retrieval demand shown in the flow chart 
of drawing 6 is explained. If digital signature retrieval demand reception is carried out (step S61), 
document verification information management equipment 3 will search the digital signature which was 
sent out in step S43 ( drawing 4 ) from document receiving-side equipment 2 and which fills a retrieval 
demand, and will return it to document receiving-side equipment 2 by considering the digital signature 
which fills a demand as a response (step S62). 

[0030] As mentioned above, alteration verification of that file and implementer authentication can be 
enabled, enabling processing of the application which created the file to the file on a file system 
according to the gestalt 1 of this operation. Moreover, it becomes possible to have a guarantee function 
to the contents of the document by storing and managing only the digital signature of a document also in 
the documentation-management engine which does not hold mass information enclosure. 
[0031] Gestalt 2. drawing 7 of operation is drawing showing the contents of the verification information 
storing field of the document verification information management equipment in the gestalt 2 of 
implementation of this invention, and drawing 8 and drawing 9 are flow charts which show processing. 
Drawing 8 corresponds to the storing processing (step S34 of drawing 3 ) to the document verification 
information management equipment 3 of a digital signature in document transmitting-side equipment 1 . 
Moreover, drawing 9 corresponds to the digital signature storing processing (step S52 of drawing 5 ) in 
document verification information management equipment 3. 

[0032] In document transmitting-side equipment 1, in case a digital signature is stored in document 
verification information management equipment 3, the digital signature created from MD and its MD is 
sent out to document verification information management equipment 3 (step S81). The hash value of 
MD is calculated (step S92), and document verification information management equipment 3 stores a 
digital signature in a digital signature storing field by making the calculated hash value into an index, if 
MD and a digital signature are received (step S91) (step S93). The drawing 7 left part is MD and the 
digital signature which are sent out from document transmitting-side equipment 1 in step S81, and the 
drawing 7 right part expresses MD and the digital signature which were stored in the verification 
information storing field in step S93. 

[0033] As mentioned above, it becomes possible to search a digital signature efficiently by according to 
the gestalt of this operation, storing in a digital signature storing field by making into an index the hash 
value of MD which serves as a basis of a digital signature in a digital signature, and storing additionally 
the information for specifying the digital signature demanded when two or more digital signatures 
existed to a single index. 

[0034] Gestalt 3. drawing 10 of operation is drawing showing the contents of the verification 
information storing field of the document verification information management equipment in the gestalt 
3 of implementation of this invention. The flow of processing is explained using the flow chart shown in 
drawing 1 1 , drawing 12 , drawing 13 , and drawing 14 . 

[0035] Drawing 1 1 corresponds to the storing processing (step S34 of drawing 3 ) to the document 
verification information management equipment 3 of a digital signature in document transmitting-side 
equipment 1. Drawing 12 corresponds to the digital signature storing processing (step S52 of drawing 
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5 ) in document verification information management equipment 3. Drawing 13 corresponds to the 
retrieval demand sending-out processing (step S43 of drawing 4 ) in document receiving-side equipment 
2. Drawing 14 corresponds to the digital signature retrieval demand response processing ( drawing 6 ) in 
document verification information management equipment 3. 

[0036] In document transmitting-side equipment 1 3 in case a digital signature is stored in document 
verification information management equipment 3, three items of the digital signature created from MD 
of MD ** and the creation name of a digital signature are sent out to document verification information 
management equipment 3 (step Sill). The hash value of MD is calculated (step SI 22), and document 
verification information management equipment 3 stores **** of a digital signature and a name in a 
digital signature storing field by making the calculated hash value into an index, if MD, a digital 
signature, and a name are received (step S121) (step S123). The drawing 10 left parts are MD sent out 
from document transmitting-side equipment 1 in step SI 1 1 , a digital signature, and a name, and the 
drawing 10 right part expresses MD stored in the verification information storing field in step S123, the 
digital signature, and the name. 

[0037] In step S43, document receiving-side equipment 2 includes the author of MD calculated at step 
S43, and the received document in a digital signature retrieval demand, and sends him out to document 
verification information management equipment 3 (step SI 31). The document verification information 
management equipment 3 which received the digital signature retrieval demand calculates the hash 
value of MD contained in a retrieval demand (step S141). Next, it investigates whether **** containing 
the author name of the digital signature of the digital signature which makes an index the calculated 
hash value, and a name which constructs and is contained in a retrieval demand in inside exists (step 
SI 42). When it exists, it answers document receiving-side equipment 2 by considering only the 
corresponding group Mika digital signatures of the author name of a digital signature and a digital 
signature as a retrieval demand response (step SI 43). When it does not exist, it answers document 
receiving-side equipment by considering NULL as a retrieval demand response (step S144). 
[0038] Gestalt 4. drawing 15 of operation is drawing showing the contents of the verification 
information storing field of the document verification information-management equipment in the gestalt 

4 of implementation of this invention, sends out the MD and the document location where document 
transmitting-side equipment 1 serves as the basis of a digital signature at a digital-signature storing 
demand with a digital signature, and shows signs that the document verification information- 
management equipment 3 which received them stores a digital signature and a document location in a 
digital-signature storing field 14 by making the hash value of MD into an index. 

[0039] As mentioned above, since the positional information of a document was added to the storing 
item according to the gestalt of this operation, document transmitting-side equipment 1 does not send 
the substance of a document to document receiving-side equipment 2, but it is only that ** also sends 
MD, and document receiving-side equipment 2 can acquire the document which document transmitting- 
side equipment 1 drew up based on that MD, and it can lessen information sent to document receiving- 
side equipment 2 from document transmitting-side equipment 1 . 

[0040] Gestalt 5. drawing 16 of operation is drawing showing the contents of the verification 
information storing field of the document verification information management equipment in the gestalt 

5 of implementation of this invention. MD from which document transmitting-side equipment 1 
becomes a digital signature storing demand with the basis of a digital signature, MD of the document 
which the drawn-up document refers to is sent out with a digital signature, and signs that MD of the 
document which the document verification information management equipment 3 which received them 
referred to with the digital signature by making the hash value of MD into an index to the digital 
signature storing field 14 is stored are shown. Signs that the document whose MD is MD1 is specifically 
referring to the document whose MD is MD3 are shown. 

[0041] As mentioned above, since MD of the document which the document is referring to was added to 
the storing item according to the gestalt of this operation, a document and the document currently 
referred to can be connected. 

[0042] Gestalt 6. drawing 17 of operation is drawing showing the contents of the verification 
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information storing field of the document verification information management equipment in the gestalt 

6 of implementation of this invention. MD from which document transmitting-side equipment 1 
becomes a digital signature storing demand with the basis of a digital signature, The document location 
of the document which MD of the document which the drawn-up document refers to, and the drawn-up 
document refer to is sent out with a digital signature. MD of the document which the document 
verification information management equipment 3 which received them referred to with the digital 
signature by making the hash value of MD into an index to the digital signature storing field 14, and 
signs that a document location is stored are shown. Specifically, the document location whose MD the 
document whose MD is MD1 is MD3 shows signs that the document of the document location 3 is 
referred to. 

[0043] As mentioned above, since MD of the document which the document is referring to, and the 
positional information of the document which the document is referring to were added to the storing 
item according to the gestalt of this operation, document receiving-side equipment 2 can acquire and 
verify the document which not only the verification of a document that received but the received 
document is referring to. 

[0044] Gestalt 7. drawing 18 of operation is drawing showing the contents of the verification 
information storing field of the document verification information management equipment in the gestalt 

7 of implementation of this invention. MD from which document transmitting-side equipment 1 
becomes a digital signature storing demand with the basis of a digital signature, The key used for a 
decryption in case the document is enciphered is sent out with a digital signature, and signs that the 
document verification information management equipment 3 which received them stores a digital 
signature and a key in the digital signature storing field 14 by making the hash value of MD into an 
index are shown. Signs that the key 1 specifically used for a decryption of the enciphered document 
whose MD is MD1 is stored in the digital signature storing field 14 are shown. 

[0045] As mentioned above, since the key information used for a decryption of the document enciphered 
was added to the storing item according to the gestalt of this operation, encryption of the document 
which can decrypt only within an expiration date is attained by preparing an expiration date, for example 
in a storing item. 

[Translation done.] 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide a mail server that can transmit an 
electronic mail with a digital signature to a destination, without 
increasing traffic of a data transmission channel and has a security 
effect of the digital signature , even when a mail transmitter terminal 
has no configuration for the digital signature . 

SOLUTION: A gateway server 22 contained in a mobile packet communication 
network 20 which is a closed network receives electronic mails from mobile 
stations 10A, 10B, etc., and applies a digital signature to the received 
electronic mails. Then the gateway server 22 transmits the electronic mails 
with the digital signature applied to them to a personal computer 40A 
through the Internet 30. The personal computer 40A analyzes the received 
electronic mails and the digital signature to detect the existence of 
forgery . 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide digital signature with high processing 
efficiency and the distribution control technique of a key. 

SOLUTION: The computer 1002 of a card holder and an IC card A or B generate 
*i signature cooperatively without distributing the secrecy of random 
'.■y.-'r.^ys generated by each of them. Further, data used for generating the 
signature are used for ciphering as a key. 



VP.ICIHT: (C) 2001, JPO 



8/5/3 (Item 3 from file: 347) 

' A \ X)C ( R ) File 347 : JAPIO 

; r K)ti JPO & JAPIO . All res. reserv. 



•'Image available** 
DISTRIBUTED SYSTEM AND RECORDING MEDIUM 



PUB . NO. : 
PUBLISHED: 
INVENTORY) : 

APPLICANT (s) 
APPL. NO. : 
FILED: 
INTL CLASS: 



2001-034164 [JP 2001034164 A] 
February 09, 2001 (20010209) 
SAKURAI KOICHI 
MI YAZAKI SHINGO 
TOSHIBA CORP 
11-209891 [JP 99209891] 
July 23, 1999 (19990723) 
G09C-001/00 ; G06F-012/14; H04L-009/08; H04L-009/10 



ABSTRACT 

PROBLEM TO BE SOLVED: To realize a distributed decoding and signature 
by arbitrary (t) agencies among (n) agencies without calculating secret 
keys at environments where distributors are not present. 

SOLUTION: In this privacy distributed system, (n) respective agencies PI to 
Pn preserve one of partial information di ( O&le ; i&le ; n) of an (n, n) type 
and the partial information di are made to be t(r+l) of partial random 
numbers Sj of a (t, n) type and these (r+1) pieces of partial random 
numbers Sj are distributed to respective agencies PI to Pn based on t-ary 
displays (cj-th value k, O≤ k≤ t-1, 0≤i≤r) of identification 
-umbers (z) of the respective agencies PI to Pn and (r+1) of partial 
. : . ; " r. rn.a t .1 on d _ j , k are obtained by collecting partial random numbers 
: . "d each other for every figure tj of the t-ary displays. Next, a 
.. - ; ..jc U transmits ciphered data C by selecting (t) of agencies Tz and 

* : •.- • w: agencies Tz answer; partial outputs Xz which are obtained by them 
:■: \-. : -\. i. f '.;ne t i cai ly processing the chipherd data C based on the partial 
information di, k respectively to the user device U then, the device U 
composes the (t) of partial outputs Xz to obtain a decoded result. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To allow the device to record and decode a signature 
video image by using water marking without increase a quantity of 
transfer data and the need of providing an original host video image. 

SOLUTION: The digital video coding device is provided with a 1st discrete 
wavelet transform section 202 that applies discrete wavelet transform to a 
host video image and provides an output of M×M wavelet coefficients, 
a 2nd discrete wavelet transform section 204 that applies discrete wavelet 
transform to a signature video image and provides an output of N×N 
(N is equal to or less than M) wavelet coefficients, a pseudo random number 



generating section 206 ffiat receives an encryption code^Wd generates a 
pseudo random number according to prescribed rules, and a coefficient 
replacement section 208 that sets N×N sets of replacement positions, 
replaces coefficients at N×N positions among the M×M discrete 
wavelet coefficients with the N×N wavelet coefficients and outputs 
the replaced M×M wavelet coefficients. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide an information communication system for 
surely keeping the anonymity of a group signature without the need of 
the exchange of member and authority. 

SOLUTION: A means 20 uses the public information v of a user (j) instead of 
a public parameter PV, generates a digital signature (m, r, s) with 
respect to digital information (m) and secretly transmits it to the user 
(j). The means 36 obtains a different value by converting the digital 

signature (m, r, s) by using secret information sj of the user (j), 
considers a value obtained from the digital information (m) , the digital 

signature (m, r, s) and the public information of a signing person as the 
public information, considers the value for which the digital signature 
[m, r, s) is converted, as the secret information of the user (j) and thus, 
■jene rates the digital signature (m, r, m', r', s'). 
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ABSTRACT 

PROBLEM TO BE SOLVED: To separately process a digital signature without 
i :.:;rv^ r o *co a file by receiving a document and also verifying the document 



by using the digital signature . 

SOLUTION: This device includes a document transmitting device 1 which 
generates a document, generates a digital signature from the document and 
transmits the document and the digital signature separate from each 
•tivrr, a document verification information management device 3 which 
. . v : -^ s ^ nc i stores the digital signature , and a document receiving 
/ which receives the document and verifies the document by means of 
i signature stored in the device 3. In such a constitution, the 
.: : ion that produced a file of a file system can be processed and also 

■ possible to verify the alteration of the file and to authenticate the 
producer of the file. In addition, even a document management organ that 
;- !f :S no information storage device of large capacity can have an assurance 
function by storing and managing only the digital signature of a 
documen t . 
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ABSTRACT 

PURPOSE: To check the error of a communication sentence and whether the 
communication sentence comes from regular communication equipment or 

not without lowering communication performance by setting a signature 
generated by a transmitter as seal information and sending it when 

transmitting communication data. 

CONSTITUTION: A private key storage part 10 of communication equipment has 
a private key K uniquely decided for each piece of equipment. Address 
information uniquely decided for each piece of equipment, the address 
information of present equipment and open information or the like are 
previously possessed from an open list 20 and stored in an address storage 
part 12. A seal information generating part 13 transfers the signature 
found by calculation to a communication frame generating part 15 as seal 
information corresponding to communication information to be transmitted. 
According to an instruction from an operating part 11, the communication 
frame generating part 15 integrates seal information 26 corresponding to 
the communication information possessed from the seal information 
generating part 13 into a communication frame. A transmission part 16 sends 
the communication frame assembled by the communication frame generating 
parn 15 to communication equipment Tj on the reception side while referring 
*• n destination address part. 



8/5/8 (Item 8 from file: 347) 

.■:;,;.ww<K; File 347: JAPIO 
:} 2004 JPO & JAPIO. All rts. reserv. 

03899384 ++ Image available** 
MULTIPLE DIGITAL SIGNATURE SYSTEM 



PUB . NO.: 04-264484 [JP 4264484 A] 



INVENTOR (5) 



APPLICANT ( S ) 

APPL. NO.: 
FILED: 
INTL CLASS: 

JAPIO CLASS: 



JOURNAL: 



.September 21, i992 (19920921) 
OTA KAZUO 
OKAMOTO TATSUAKI 
FUJIOKA ATSUSHI 

NIPPON TELEGR & TELEPH CORP <NTT> [000422] (A Japanese 
Company or Corporation), JP (Japan) 
03-024854 [JP 9124854] 
February 19, 1991 (19910219) 

[5] G09C-001/00 ; G06F-015/00; H04L-009/00; H04L-009/10, 
H04L-009/12 

4 4.9 (COMMUNICATION -- Other); 4 4.3 (COMMUNICATION — 
Telegraphy); 45.4 (INFORMATION PROCESSING Computer 
Applications ) 

Section: P, Section No. 1479, Vol. 17, No. 51, Pg . 71, 
February 02, 1993 (19930202) 



ABSTRACT 

PURPOSE: To provide the efficient multiple digital signature system which 
can reduce the memory capacity, throughput, and communication quantity 
without storing signatures individually by a verifier when many persons 
want co sign an electronic document in order. 

CONSTITUTION: When plural signers 200... 600 sign the electronic document in 
order, the signers 200... 600 register keys in the open file at a center 
IJO, keys for inspection are open to the public, and signature keys are 
^-hl rci led in secret. The signers 200... 600 calculate signature 
components for a message by using the prime number of system common 
m forma c ion and signature keys and sends them to the verifier 8 00 
L-ocjecher with the message. The signatures are inspected by verifying 
whether the signature components are correct signatures or illegal 
signatures for the message by the verifiers 800 by using the keys for 
inspection given from the open file at the center 100. 
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Group signature generation apparatus for secured business application, 
affixes electronic signature unique to group on message transmitted 
from member belonging to that group 

Patent; Assignee: FUJI XEROX CO LTD (XERF ) 
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Number of. Countries: 002 Number of Patents: 002 
Patent Family: 
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Abstract (Basic): US 20030188167 Al 

NOVELTY - A member authentication unit (102) authenticates each 
group member for identity; using an authentication message. An 
electronic signature generation unit (104) generates and affixes an 
electronic signature of the group to the message, when the 
authentication results is determined. A message transmitting unit (109) 
transmits the message with affixed electronic signature to a 
receiver . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
fol lowing : 



(1) group signature generation method; 

(2) group signature computer program; and 

(3) mailing list server. 

USE - Group signature generation apparatus for secured business 
application . 

ADVANTAGE - Enables a j ob group member to transmit a message with 
a signature of the job group without holding a secret key of the 
job group, whereby the receiver can validate that the message is from 
the job group. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
the group signature generation apparatus, 
group signature service unit (10) 
directory service unit (20) 
archive service unit (30) 
time scamp service unit {AO} 
member authentication unit (102) 

signature generation unit (104) 
message receiving unit (107) 
message transmitting unit (109) 
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Electronic signature processing system divides calculation process of 
electronic signature , into hash and encryption processes, such that 
hash and encryption calculations are performed by server and terminal, 
respectively 

Pa'cent Assignee: NEC CORP (NIDE ) 

Number of Countries: 001 Number of Patents: 001 

Pa ten c Family: 

Patent No Kind Date Applicat No Kind Date Week 
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Priority Applications (No Type Date): JP 2001157312 A 20010525 
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Abstract (Basic) : JP 2002351316 A 

NOVELTY - The calculation units (22,32) divide the calculation 
process performed with respect to electronic signature , into hash 
calculation process and encryption calculation process using secret 
key, such that the hash calculation and encryption calculation are 
performed respectively by a server (2) and a terminal (3) . 

USE - Electronic signature processing system. 

ADVANTAGE - By processing the electronic signature separately 
in server and terminal side calculation units, communication cost and 
• : me are reduced. Enables the user to utilize managed secret key 

r. r o rma t i on . 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
the electronic signature processing system. (Drawing includes 
non-English language text). 

Server (2) 

Terminal (3) 



Ca. Leu lac ion unit (2^,32) 
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Mail server outputs electronic mail to destination after providing 

digital signature to the mail 
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NOVELTY - A mail receiving unit receives electronic mail from mail 
client. A signature unit outputs digital signature to the 
electronic mail. Mail transmitting unit transmits electronic mail with 
digital signature to transmission destination. 

USE - Mail server to which portable telephone is connected through 
mobile communication network. 

ADVANTAGE - Transmits mail with digital signature to 
destination without increasing traffic of transmission path. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
electronic mail system used for mail server. (Drawing includes 
non-English language text) . 
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Secret distributed system generates decoding and signature results by 
combining information from arbitrary terminals among distributed 
terminals without computing secret key 

Patent Assignee: TOSHIBA KK { TOKE ) 
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JP 2001034164 A 19 G09C-001/00 

Abstract (Basic): JP 2001034164 A 

NOVELTY - The user terminal (U) is connected to distributed 
terminals (Pl-Pn) through a network (1). Final information about secret 
key is partially distributed in each terminal. Decoding and signature 
results are generated by combining information from arbitrary terminals 
among n' terminals without computing secret key. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
memory medium. 

USE - Secret distributed system. 

ADVANTAGE - Decoding result is generated without need for secret 
key and portioner. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
secret distributed system. 

Network (1) 

Terminals (Pl-Pn) 

user terminal (U) 
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Distribution management apparatus calculates signature value 
corresponding to hash value of object flow information by using 
computed first and second signature values 
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Abstract (Basic) : JP 2000305995 A 

NOVELTY - The signature value corresponding to the hash value 
oiT the object flow information is calculated by using the first and 
second signature values. A signature unit computes the first 
signature value to the hash value of the object flow information by 
■:s:nq a signer confidential information. 

DETAILED DESCRIPTION - An object flow information generator 
computes the second signature value to the hash value of the object 
flow information by using a signature key information. The signer 



confidential information is taken out from a signer conlKential 
information memory. A signature key information selector takes out 
• -.^ signature key information that corresponds to the product 

: rier from the signature key information memory. An INDEPENDENT 

:M : s also included for an information distribution management 

USE - Used for performing the distribution management of goods. 

/ADVANTAGE - Enables distribution manufacturers to verify a 
signature without the necessity of acquiring the certificate for 
every signer from an authentication station. Prevents mischief since 
forgery of the identifications are prevented. 

DESCRIPTION OF DRAWING (S) - The figure shows the flowchart of the 
verification operation. 
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Data communication system - has communication apparatus (10) provided 
with authentication processor for determining correctness of data 
communication between communication apparatus and another communication 
apparatus 
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Abstract (Basic) : JP 11252068 A 

NOVELTY - A communication apparatus (10) in the data communication 
system (1) is provided with an authentication processor (14) for 
determining the correctness of the data communication between the 
communication apparatus and another communication apparatus. DETAILED 
DESCRIPTION - The authentication unit compares the electronic 
signature , decoded with a decoding key of the other communication 
apparatus specified by the address data, with the data for 

h<ont icat ion . Either communication apparatus reads an IC card (20) 
wi:i "\\ scores the data for authentication corresponding to an electronic 
signature generated by the address data on the other communication 
: : r j:vr.'js. The other communication apparatus has an intrinsic 
<■-■' :rypt ion key for the electronic signature . INDEPENDENT CLAIMS are 
-:ldo included for the fol lowing : the components of the data 
communication system; and the recording medium. 

USE - None given. 

ADVANTAGE - Enhances data communication efficiency in which data 
communication is established based on authentication data stored in a 
recording medium. Ensures safe and optimum access opposing specific 
communication apparatus from a remote area. DESCRIPTION OF DRAWING (S) - 
The figure shows the functional block diagram of the data communication 
system. (1) Data communication system; (10) Communication apparatus; 



(14) Authentication processor; (20) IC card. 
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Digital signature system used by communication apparatus - confirms 
correctness of generated signature using disclosing data of authorized 
user within group, and distinguishes user which generated signature 
from random number used in generating signature 
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Abstract (Basic): JP 11202767 A 

NOVELTY - The correctness of the generated signature is confirmed 
using the disclosing data of the authorized user within the group. The 
user which generated the signature is then distinguished from the 
random number used in generating the signature . DETAILED DESCRIPTION 
- An intrinsic disclosing data is generated from a disclosure parameter 
c:omrnon to each user and the confidential data of each user. New 
disclosing and confidential data are then generated as member data 
based on the public-presentation data intrinsic to an authorized member 
of a particular group. The generated member data are then secretly 
f r^nsmi t ted to a user within the group. The relationship of each 
■j^ne rated member data are then confirmed as to whether or not 
predetermined conditions were met. Using the confirmed member data, a 
i-or responding signature is generated. An INDEPENDENT CLAIM is also 
included for a data communication system. 

USE - For communication apparatus. 

ADVANTAGE - Improves safety by maintaining anonimity of generated 
signature even in situations by which comparison problems resulting 
from use of discrete logarithms occurs. Addition of new members is 
unnecessary when exchanging members within group. DESCRIPTION OF 
DRAWING (S ) - The figure shows the component block diagram of the 
communication system. 
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Interactive authentication for e.g. communication system - involves 
transmitting digital signature of certificate in disclosure key 
corresponding to digital signature key of apparatus, towards another 
apparatus, to verify received certificate and signature 
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Abstract (Basic) : JP 11191761 A 

NOVELTY - In order to verify the certificate and the digital 
signature received by communication apparatuses (STA1,STA2), the 
communication apparatus (STA2) transmits the digital signature of a 
cert i. ticate in a disclosure key corresponding to a digital signature 
key, towards the communication apparatus (STA1). DETAILED DESCRIPTION - 
'.:.<■ im* '..hod involves authenticating the digital signature of a key 
i.sci'jsure authentication station corresponding to the digital 
signature key of a communication apparatus (STA1). Another digital 
signature key is transmitted to another communication apparatus 
{ STA2 ) . An INDEPENDENT CLAIM is also included for an interactive 
authenticating apparatus. 

USE - For e.g. communication system. 

ADVANTAGE - Prevents incorrect authentication of certificate 
disclosure key corresponding to secret key. Ensures efficient 
interactive authentication procedure. DESCRIPTION OF DRAWING ( S ) - The 
figure shows the sequence diagram of an interactive authentication 
procedure . (STA1 , STA2) Communication apparatuses . 
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"he disc ributed system has a number of clients that make requests 
jf,or< servers. Access co the server has constraints related to the 
identity of the client. A client (40) communicates with a server (42) 
over an underlying secure communications protocol (2a) . The server 
checks (2b) in an internal database (50) if the client is known, and if 
so the database returns (2c) access control rules for the client. These 
rules then condition the client communications (2d) . 

The client identity is known from the secure protocol and may 
include the use of signatures . If the signature is not in the 
database, its originator can be referenced. 

ADVANTAGE - Provides secure communi cation and signature 
verification without requiring a global certification authority. 
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Abstract (Basic): EP 795979 A 

The method involves using a computer (2) interfaced (3) to a module 
(!) in which a processor (4) with memory (5) is linked to a radio clock 
(6} and a battery-powered crystal clock (8). A document prepared in the 
computer is encrypted and signed by the processor before being 
t ransmi tted . 

The time markings are supplied by both clocks and compared. If the 
discrepancy is less than a predetermined maximum, the time entered by 
the radio clock is applied to the document, encrypted, and if necessary 
signed together with it. 

ADVANTAGE - Time of signature , presentation, transmission or 
reception of any document can be established reliably, without 
possibility of falsification by originator. 
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The appcs is used to confirm a signature when an user signs the 
in norma u ion relating to the utilisation of a source which is offered in 
a format: that is utilised only with a key information. The utilisation 
information for a signature , is formed by a signature information 
issue unit (22). A coupling calculation unit (34) receives the 
encrypted key information and the utilisation information and performs 
a first calculation. A signature calculation unit (30) receives the 
result of the first calculation and uses the user's individual key to 
perform a signature calculation. 

The execution result is returned to an isolation calculation unit 
of the information issue unit. The isolation calculation unit uses the 
key information and the signal link information and isolates the 
information to a signed utilisation information. 

USE /ADVANTAGE - For confirming signature of person utilising 
broadcast services. Improves calculation efficiency. Enables 
confirming correctness of signature without verifying digital 
signature . 
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ABSTRACT: DigiCash BV of Amsterdam is removing one of the biggest 
obstacles to keeping financial transactions over networks secure by 
licensing its electronic cash (e-cash) system to financial institutions. 
E-cash is a safe replacement to hard currency and also guards against 
controls large corporations potentially have over electronic transactions. 
Unlike credit and debit cards that offer little security, e-cash makes use 
of public key or digital signatures, which are safer and well-adapted for 
network uses including Internet. The user creates both a public and private 
key. The public key is widely proliferated, while the private key is 
guarded. Users actually make the money themselves and their financial 
institution must then validate it. The user could create e-cash notes in 
chosen denominations and assign each a random security number. One possible 
problem with the system is the same note could be used more than once. 

TEXT: 

One of the last barriers to the widespread use of public computer 
networks for commerce has been the difficulty of keeping financial 
transactions secure and private. 

However, a Dutch-based company has developed a secure replacement for 
hard currency that also protects against the Orwellian-like control that 
electronic transactions could give to large banks and other financial 
institutions . 

DigiCash BV of Amsterdam is licensing the basic technology for 
digital, electronic cash (called E-cash for short) to financial 
institutions and other large companies. DigiCash also hopes later this year 
to release free software (for PCs running Windows and for Macintoshes) 
based on its technology. 

DigiCash is not the only outfit interested in helping put financial 
transactions on-line. Earlier this month, the U.S. Postal Service expressed 
an interest in playing a role in electronic commerce. 

Those who would like to try DigiCash 1 s software can ask to be 
included in beta testing, which began at the end of last month. The E-mail 
address for would-be beta testers is ecashbeta@digicash . support.nl. 

David Chaum, DigiCash 1 s managing director, outlined the E-cash 
technology at the World-Wide Web conference in Geneva in May. The company 
also has hardware-based payment schemes that use the same basic technology 
as digital cash, and has implemented these on a small scale, but its 
digital cash is the first software-only product to use the technology. 

Privacy 

Replacements for cash are, of course, nothing new. Credit cards and 
debit cards have been in use for years. However, they have relatively poor 
security (in the case of debit cards, just a four-number personal 
identification number) and their use is easily tracked. 

The latter problem is of growing concern to consumers, as it becomes 
more apparent that an unacceptably large number of organizations can get 
very detailed personal information about an individual just by using the 
traceable records produced by credit and debit cards. 

Electronic transactions are often much more efficient, however, so 
they are likely to become more common. To avoid further erosion of privacy, 
a system as anonymous as cash transactions -- with the efficiency of 
electronic transactions -- is needed. 

Public key signatures 

At its core, E-cash uses public key signatures, or digital 
signatures, which are both very secure and well-suited for use on public 




networks (such as a telepl^pe system or the Internet) beca they can be 
used without requiring so-called "secure" or untappable channels. 

Public key signatures are one manifestation of public key 
cryptography systems, which were first developed in the 1970s at Stanford 
University and the Massachusetts Institute of Technology. The secret part 
of the encryption scheme (the private key that deciphers encrypted messages 
or signatures) is never transmitted between the sender and receiver. 

Instead, the sender (or signer, in the case of E-cash) generates both 
a private and a public key. The public key is disseminated as widely as 
possible, but the private key remains secret. Any message encrypted with 
one of the two keys can only be deciphered with the other. 

To "sign" an electronic message, the signer generates a number based 
on the contents of the document (typically with some kind of hash function 
or checksum) and then encrypts that number with his or her private key. The 
signature can be embedded in a document or sent in a separate file. 

To verify that a document was signed by the sender and has not been 
altered since it was signed, the recipient looks up the signer's public key 
(which will probably be available in an on-line database at some point), 
uses the same formula as the sender to generate a number from the 
document's contents, and then decrypts the signature using the sender's 
public key. If the number generated from the document and the number 
decrypted in the signature are equal, then the signature is valid. 

In the E-cash system, the "currency" itself would bear the signature 
of the bank or other financial institution that issued the E-cash. That 
signature could be checked by a merchant for authenticity using the bank's 
public key. Digital signatures would also be used by the bank's customers 
for withdrawals and by merchants for deposits. (The public keys might, in 
fact, be stored by the Postal Service. The Postal Service is developing 
postal electronic services to issue public key certificates and store them 
in a public directory, officials said earlier this month.) 

Withdrawing bank notes 

With E-cash, consumers would essentially make the "money" themselves, 
then get their bank (or other financial institution) to authenticate it. 
This is similar to writing a personal check, except the merchant would not 
need to verify the identity of the person. 

The consumer would generate E-cash notes in whatever denominations 
necessary and attach a random number to each of them. The random number 
would have to be of a sufficient size to make the chance of duplication 
negligible (100 digits would be sufficient), but in the E-cash system it is 
important that the consumer (or the consumer's computer) be the one to 
generate the numbers. 

Consumers would then sign the E-cash notes with their digital 
signature and submit them to the bank. The bank would check the validity of 
the digital signature, deduct the amount of the E-cash notes from the 
consumer's account, and then sign the notes with the bank's digital 
signature before sending them back to the consumer. 

When E-cash is used to purchase something, merchants would check the 
authenticity of the notes by checking the signatures against the bank's 
public keys. The notes would then be sent back to the bank by the merchant. 
The bank would check the authenticity of its own signature, would credit 
the merchant's account (after checking the merchant's attached signature), 
and, as an option, might send back a signed receipt. 

Every step in this process can be done over a public network. 
Obtaining the public key of any of the participants by methods such as 
wiretapping would not weaken the system's security in any way, because the 
corresponding private keys are needed to decipher signatures or to create 
valid digital signatures. 

Contrast this with the way credit cards are used. If someone 
intercepts a credit-card number and the name of its user, he or she can use 
that number to make purchases. Listening in on an E-cash transaction gains 
the eavesdropper nothing. 

Anonymity 

The system as described so far is secure, but the bank would still be 
able to track exactly where its customers were spending their money. This 
is where the random numbers become more important. 

Before submitting the E-cash notes to the bank, the consumer would 
multiply the random numbers on the notes by a factor known only to the 
consumer. After the notes were signed by the bank, the consumer would 



divide the numbers on the^Pfnk notes by the same factor pr^^ously used as 
a multiplier. Because of the mathematics of public-key cryptography, the 
bank's signature on the authenticated notes would still be irrefutably 
valid, but the bank would now have no record of which customer had which 
notes (much as banks have no record of which customer has which particular 
$5 or $20 bill) . 

Aside from giving the consumer anonymity, the random numbers used to 
mark the E-cash could also be used to trace the money in the case of theft. 
If a user's computer were stolen, the E-cash stored on it could be used by 
anyone . 

After the theft, however, the user could supply the bank with the 
multiplier used on the random number. The bank could use that multiplier to 
calculate the real number on the stolen E-cash. Armed with that identifying 
number, the bank could then trace the E-cash if it were used by the thief. 

The system thus has the advantages of cash and credit cards: An 
E-cash payment is as anonymous as cash unless its owner chooses to have it 
traced; then it becomes as easy to follow as a credit card transaction. 

Another advantage is that consumers could use a different digital 
pseudonym (with its own verifiable signature) at each institution with 
which they do business -- making large-scale, cross-indexed consumer 
databases (used today by anyone with access to Social Security numbers) 
next to impossible. 

Remaining problems 

A couple of problems remain with this system. One is the possibility 
that the same note could be spent more than once. DigiCash has built a 
rather complex mathematical check into the system to make sure notes are 
traceable if they are used more than once. 

More proactive solutions (intended to stop double spending before it 
happens) are even more complex and involve special "observer" chips or 
processes that could be validated by some authority, such as a government 
regulatory agency. 

Such chips or processes would have to be built into the computer that 
does the E-cash transactions, so this solution is only suitable for 
hardware-based systems (such as handheld computers that are used as 
electronic wallets) . 

A more vexing problem is how to encourage large retailers and 
financial institutions to use the new private system when they get so much 
benefit (marketing information and so forth) from the current system. 

DigiCash argues that financial institutions would save an enormous 
amount on record keeping (counting cash, tracking credit slips, and making 
numerous transactions with credit-card companies), and that they would save 
an equally large amount on efforts now made to combat fraud. 

The same system of digital signatures might also be used in numerous 
other areas. Diplomas, drivers 1 licenses, letters of credit, and other 
documents that are used for authentication and to judge credit worthiness 
could be validated less intrusively and with greater certainty using public 
and private keys and signatures. 

DigiCash can be reached in the Netherlands at 31-20-665-2611. Readers 
can get more information by sending mail to info digicash.nl or on the 
World-Wide Web at http://digicash.support.nl/. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide a character information transmission 
system chat interlocks setting of a caller number notice with setting for 
a L caching/ not - attaching a signature . 

SOLUTION: The character information transmission system transmits 
character information to which signature data are attached, when the 
caller number notice is set and the signature data to be attached are 
registered at the transmission of the character information. 
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Card payment method with only a secret number without a customer's 
signature on a printed sale slip and to transfer the payment amount to 
an account of an affiliated store 
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Abstract (Basic): KR 2003042933 A 

NOVELTY - A card payment method is provided to process a card 
payment with only a secret number without a customer's signature on 
a printed sale slip and to transfer the payment amount to an account 
of an affiliated store as soon as the card is normally approved. 

DETAILED DESCRIPTION - An affiliated store selects a card payment 
menu at a payment processing terminal ( 700 ) , and the payment processing 
terminal requests an access to a server of a service provider (710) . The 
server of the service provider approves the access request from the 
payment processing terminal ( 720 ) . The payment processing terminal reads 
the data on the card of a customer if it is inserted into a slot of the 
terminal ( 730 ) , and receives a secret number of the card and the payment 
amount (740, 750). The terminal transmits the card data, the secret 
number and the payment amount to the server of the service 
provider ( 760 ) , and then the server of the service provider transmits 
the received data and the data on the affiliated store to a server of a 
card company for requesting a transaction approval ( 780 ) . The server of 
the card company checks the credit of the customer ( 7 90 ) , transmits the 
check result to the server of the service provider ( 800 ) . If the credit 
of the customer is normal, the server of the card company instantly 



transfers the payment ^rount to the account of the affJ^^ted 

sLore{850). The card processing terminal receives the credit check 
result (810) and displays it (820). 
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Abstract (Basic): US 20030187866 Al 

NOVELTY - A directory object containing multiple entries is divided 
into hash components storing a respective non- overlapping portion of 
the entries. A hash master containing different entries pointing to 
different hash components is created. Executable applications are 
configured to access the hash component which is determined using a 
mapping function for respective information transfer operation on 
per-access basis. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
f ol lowing : 

(1) computer-readable storage medium storing program code for 
providing increased concurrency among information transfer operation; 

(2) object-based data storage system. 

USE - In object-based data storage system (claimed), for providing 
increased concurrency among information transfer operation performed by 
executable application. 

ADVANTAGE - The problem of access serialization is alleviated, 
while reducing data access latency and contention. The creation of 
hash components and hash master allows more than one client 
application or file manager, to concurrently access corresponding hash 

components for information transfer operation on stored objects, 
without creating access contentions. 

DESCRIPTION OF DRAWING (S) - The figure shows the flowchart 
explaining the method of providing increased concurrency among 
information transfer operations performed by executable operations 
operating in an object-based data storage system. 
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Abstract (Basic) : US 20020116527 Al 

NOVELTY - A parser (11) acquires an address information of an 
incoming packet, corresponding to which a predetermined number of shift 
control logic (14,18) are produced. A selector selects an identity 
independent distribution (I.I.D) hash index from shift control 
logic, so that an address table is used to output forwarding 
information for the incoming packet. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is included for look up 
information generating method. 

USE - Lookup engine for network device. 

ADVANTAGE - Enables supporting packet forwarding mechanism 
reliably. Reduces the chance of the collision and improves the 
efficiency. A simple hardware implementation is provided for looking up 
an address table. Enables using the memory more efficiently within a 
short time. 

DESCRIPTION OF DRAWING (S) - The figure shows a functional block 
'! lag ram of the lookup engine. 
Parser (11) 

Shift control logic (14,18) 
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NOVELTY - A server (100) has a database (101) storing the 
signatures of a user on an access request by a client, a transmitting 
•jp, ic (203) transmits a response requesting signature input of the 
user. On reception of the signature input, another transmitter (206) 
transmits result of authentication to the server and user. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following : 

(1) Authentication control method; 

(2) Computer readable memory storing authentication program; and 

(3) Authentication program. 

USE - Authentication system for performing authentication for 
clients for access to server. 

ADVANTAGE - A sign authentication is performed safely. 

DESCRIPTION OF DRAWING (S) - The figure shows the functional 
structure of the sign authentication system. (Drawing includes 
non-English language text). 

Server (100) 

Database (101) 

Transmitters (203, 206) 
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corruption is due to object or separate signatures , by comparing 
signature value from inverse transformation function with message 
signature value 
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Abstract (Basic) : WO 200116673 Al 

NOVELTY - A software object signature value (S) is extracted from 
a message m(s) with value (s) . An object signature value (s 1 ) and 
value v' of secrete signature transformation function f{s) are 
extracted from object. A signature value (s' 1 ) is generated by 
applying inverse function f(s)-l to v and is compared with s and s'. 
Message signature value or object is set as suspect, if s ' ' =s ' and if 
s''=s, respectively. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
;.:ser terminal for receiving and authenticating software objects from 
■ -mirun.i. ca t ion network . 

USF. - For detecting suspect object signatures and suspect 

waie objects including application code, operating systems and 
associated components, basic input-output structures (BIOS), Java 
virtual machines (JVM), Java applications and Applets, etc., residing 
in digital set top terminals for cable and satellite television. 

ADVANTAGE - Determines whether a failed authentication is resulted 
from corruption in the downloaded object or from corruption of the 
separately communicated signature for the downloaded object. A 
value indicative of the software object transmission facility is 
generated by the compact transformation function that operates on 
signature . Actual or attempted attacks on the security of the scheme 
used to download the software object is analyzed. 

DESCRIPTION OF DRAWING (S) - The figure shows the flowchart of the 
authentication failure detection method. 
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Session management method over stateless protocol of internet 
communications, involves associating two requests, when total statistical 
significance calculated for identifiers exceeds preset significance level 
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Abstract (Basic): WO 200049528 Al 

NOVELTY - First and second requests containing several first and 
second identifiers are received respectively. The several first 
identifiers are compared with several second identifiers. The first 
request: and second request are associated when a total statistical 
significance calculated for the identifiers, is detected to be greater 
"han a preset required significance level and when the comparison is 
success f u 1 . 

DETAILED DESCRIPTION - A hash is generated for one of the several 
identifiers. If the generated hash is incompatible with previously 
generated hashes , information is associated with the generated hash 
based on which a response is sent, else, a response is sent based 
upon information previously associated with the previously generated 
hash . An INDEPENDENT CLAIM is also included for token for session 
management . 

USE - For session management of internet communications over 
stateless protocol . 

ADVANTAGE - Allows for faster and easier development by hashing the 
concatenated string. Enables estimating the popularity of each browser 
type or the server can calculate this over time by recording each HTTP 
request into an historical statistical database. Fingerprint provides 
stronger identification which is obtained by digitally hashing the 
identifiers, by enabling larger collection of identifiers. Allows the 
application designer to limit its error rate is quantifiable way. 

DESCRIPTION OF DRAWING (S) - The figure shows the flowchart of 
method for HTTP session management. 
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Software licensing method for electronic distribution in computer system, 
involves generating digital signature for license using public or 
private keys and transmitting to user 
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Abstract (Basic) : US 6078909 A 

NOVELTY - Public and private keys compatible for use with digital 



signature algorithm ^) for license for selected ell^Pronic 
distribution, are generated at licenser. A digital signature for 
license using one of the keys, is generated at licenser and transmitted 
to user. The license is verified by user using DSA for digital 
signature , license data and different one of keys without any 
transmission with licenser. 

DETAILED DESCRIPTION - Only the public key is distributed to the 
user in electronic distribution and the private key is retained for 
generation of digital signature for license. Digital signature is 
generated by providing information to DSA including data for license 
terms for license. The license is verified by generating a true/false 
indication by DSA for license using the public key. INDEPENDENT CLAIMS 
are also included for the following: 

(a) software licensing apparatus for electronic distribution in 
computer system; 

(b) computer program product 

USE - For licensing software for electronic distribution such as 
documents, letters, graphic images of computer system. 

ADVANTAGE - Offers simple, low-cost software licensing method by 
utilizing digital signature software. 

DESCRIPTION OF DRAWING ( S ) - The figure shows the computer network 
utilizing the software licensing method. 
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Method for preparing safe electronic document in electronic commerce, 
involves comparing decoded document with one without digital signature 
to obtain message 
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Abstract {Basic) : US 6039248 A 

NOVELTY - An electronic notarized document is transmitted with 
digital signature to customer (10) or merchant (20) . The document is 
then decoded and transmitted with digital signature to notarization 
organization (60). The decoded document is then compared with document 
without digital signature to obtain message of document. The 
document is then sent with digital signature to customer or 
merchant and then stored. 

DETAILED DESCRIPTION - A primary electronic notarized document is 



prepared based on tra^^ction detail information, a cull^ner 
certificate, merchant certificate, notarizing organization certificate 
and certifying organization certificate. A digital signature is put 
in the notarized document by using private key so as to form a 
secondary electronic notarized document which is then transmitted to a 
customer merchant. The secondary electronic notarized document is 
decoded and a digital signature is put on it using private key so as 
to form tertiary document. The tertiary document is then transmitted to 
notarizing organization and is decoded using an open key to form a 
biquadratic electronic document. This document is then compared with 
primary document and a message of notarized document finding 
correspondence between primary and biquadratic documents is obtained. A 
digital signature is then put on the message using a private key. A 
: i na 1 document is formed for providing realization of transaction by 
;:i::iriq digitally signed tertiary document. 
- : r, E-commerce . 

/■: VANTAGE - Authenticity of transaction document is ensured due to 
----- - : : digital signature . Safety in transaction is increased as 

:^::iai of reception or transmission of transaction are prevented. 

DESCRIPTION OF DRAWING (S) - The figure shows the electronic 
transaction using certificate techniques. 

Customer (10) 

Merchant (20) 

Notarization organization (60) 
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Detection method for computer viruses spanning multiple data streams - 
processor scans data streams for components of virus, and scan results 
are used by processor to evaluate Boolean expression in order to 
determine existence of virus 
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Abstract- (Basic): WO 9908139 A 

Virus signature is created and written in form of Boolean 
expression using signatures of components as operands of Boolean 
expression. Processor scans data streams for components of virus, and 
scan results are used by processor to evaluate Boolean expression in 
order to determine existence of virus. 

The processor receives (305) request from application executing on 
computer system to scan select files for viruses. Processor gets data 
streams comprising selected files retrieved from storage medium and 
stores them in system memory for identification (315) either as 
belonging to one file or several files, and scans (320) identified data 
streams for component of virus signatures to be written to system 
memory (330) . Specifically for each virus signature , the processor 
scans the data streams for operands of Boolean expression that 
represents the virus signature . Preferably, separate scans are done 
for each file or for data streams belonging to several files Data 
streams of one file can be divided into several groups and scanned by 
group . 

USE - For detecting computer viruses that span multiple data 
streams (CLAIMED) . 

ADVANTAGE - Is capable of identifying correctly virus components 
spanning multiple data streams, can create virus signatures and 
indicate presence of several components. 

DRAWING DESCRIPTION - Drawing illustrates method of detecting 
computer viruses according to present invention, with self-explanatory 
flow diagram of process execution. 
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initially assigning object address as hash value and when compacting 
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Abstract (Basic): WO 9900733 A 

The computer system operates object based applications that create 
objects and later remove some of them during memory compaction. Objects 
are created in a dynamically used space (650) and given two flags 
(614,616) that are initially zero. The flags indicate that no hash 
value has been assigned and the object has not been moved. When a hash 

value is assigned, the current address of the object is used and a 
flag set ( 644 ) . 

When memory is compacted, e.g. objects removed (620), objects that 
have no hash value can be freely moved. Objects with hash values 
are moved, a new hash field with the previous address is added and 
another flag set to indicate the additional word. 

ADVANTAGE - Allows for compacting without unnecessary hash 
value storage and inherently good hash value distribution . 
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Abstract (Basic): US 5195181 A 

The scheme implements workload partitioning between separate 
receive and transmit processors. Each receiving processor collects, 
into a digest , information relating to network protocol processing of 
a particular message, obtained via sequential byte processing of the 
message at the time of reception of the message. The information placed 
into the digest is information that is necessary for the completion 
of the processing tasks to be performed by the processor of the 
■ r d n sm i icinq line card. 

The digest is passed to the transmit processor through a buffer 
r :-:change between the receive and transmit processors. The transmit 
:. ro^essor reads the digest before processing of the related message 
:or transmission and uses the information in the network protocol 
processing of the message. 

USE /ADVANTAGE - In multiprocessor router. 
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Abstract (Basic): EP 467448 A 

The built-in program memory (14) stores data including program 
instructions for controlling a functional unit (20). A signal generator 
(.18) combines data read from all memory locations during a memory test 
sequence initiated by an external control signal, to generate a 
signature word used for verification means. This is decoded at the 
test finish for execution as a normal program instruction so directly 



determining the subse nt operation of the device. An^^pnst ruction can 
be encoded using a seed word in the signature generation. 

The signature generator is formed during memory test sequence by 
temporary reconfiguration of at least part of the instruction decoder. 

ADVANTAGE - Verification result can be communicated externally 
without: the need for a dedicated data path. (13pp Dwg.No.1/5 
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A fault tolerant multiprocessor system is based upon a number of 
identical processors, each one of which has a CPU (1), ROM (4), RAM 
(5), timer (6), I/O interface (12) and a communication interface 
(11). Each of the processors has an error independent signature 
switching circuit (10) that are hierarchically connected to the highest 
priority processor. 

The signature circuit operates to provide automatic monitoring 
of the processor, combined with testing and isolation of the unit in 
the event of a fault being identified. In association with the 
processor, the signature controls a cycle that results in fault 
correction. The control algorithm is based upon comparison of 
signature values . 

ADVANTAGE - Provides high fault-tolerant mode of operation 
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Detailed Description 

. . . data element 180 is, in some cases as will be described in greater 
detail herein below, referred to as a "digital certificate". Furthermore, 
• :.• ' : i •:; i i. a 1 signature 160 may be simply transmitted or stored as a 
separate data element, so long as it maintains a reliable association 
; • .s message I 1 0. Each digital signature 160 is unique to the 
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UNIVERSAL SYNCHRONOUS NETWORK SYSTEM FOR INTERNET PROCESSOR AND WEB 

OPERATING ENVIRONMENT 
SYSTEME DE RESEAU SYNCHRONE UNIVERSEL POUR PROCESSEUR INTERNET ET 

ENVIRONNEMENT DE FONC T I ONNEME NT INTERNET 

Patent Appl i cant /Assignee : 

STANFORD SYNCOM INC, 2390 Walsh Avenue, Santa Clara, CA 95051, US, US 
(Residence), US (Nationality) 
I nventor ( s ) : 

TRANS Francois, 1504 Clay Drive, Los Altos, CA 94024, US 
Legal Representative: 

MCNELIS John T, Fenwick & West LLP, Two Palo Alto Square, Palo Alto, CA 
94306, US 

Patient and Priority Information (Country, Number, Date) : 

Patent: WO 200062470 Al 20001019 (WO 0062470) 

Application: WO 2000US10101 20000414 (PCT/WO US0010101) 

Priority Application: US 99129314 19990414; US 99417528 19991013; US 
99444007 19991119; US 99170455 19991213; WO 68US42 20000315 

Designated States: AE AL AM AT AU AZ BA BB BG BR BY CA CH CN CU CZ DE DK EE 
ES FI GB GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU 
LV MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK TJ TM TR TT UA UG 
UZ VN YU ZA ZW 



'EP) AT BE CH CY DE DK r T FR GB GR IE IT LU MC NL PT 

{OA) BP BJ CF CG CI CM GA GN GW ML MR NE SN TD TG 

(AP) GH GM KE LS MW SD SL SZ TZ UG ZW 

<EA) AM AZ BY KG KZ MD RU TJ TM 
Publication Language: English 
Filing Language: English 
Full Lexc Word Count: 97387 

Main I ncerna t ional Patent Class: H04L-007/00 
Full next Availability: 
Detailed Description 

Detailed Description 

... waveforms. The security system transmits the signature of the waveform 

by pre-positioning the signal at a specific frequency and phase matrix 

cell. The signal signature of the wavefonn's content is provided 
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Detailed Description 

. . . or whether the Relying Party wishes to accept the Signing Party offer 
to purchase the warranty (reqType is "ACCEPT") . 

The signer's certificate chain is conveyed in the detached signature 

, rather 

than as a separate XML element . The detached signature consists of 
the 



Siqnerlnfo structure, a^Rrsion number, digest algoritn^plD, and 

(optionally) certificates. 



1 0 The relying party may include the entire signed transaction rather 
than the detached signature. This would be the,.. 

...and the time for which the offer is valid. 

CUSTOMER OFFER (XML) 

1 0 The Relying Party Bank creates a CMS SignedData message containing 
the detached signature of the original transaction and the offer. The 
forwarded 

:":er is identical in syntax to che interbank offer 
■ * : ' ! •■>; K NT c u s l ome r - o f f e r 
- amount, expires, fee, offer-expires) > 

*. • •:■ 1 TANi'-E {XML) 

Ke.lyi.ng Party creates a... 
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... into che CORBA module so chat may become usable on CORBA module stubs. 
'* j-hculd also be noted that if the request is not time- independent , 



transport interceptor needs to remember the signature so that it can 



convert the response to ^ n invocation on the ReplyHar^^er . The ART 

:ore might provide some assistance in this aspect... 
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Detailed Description 

... deliver separate streams via separate carriers to an end user. Also 
known to the inventor is a system for providing a means of applying a 
signature and associative frame identification to the separate 
streams respectively before broadcast so that both streams may later 
be resynchroni zed at the user's end. Such a system is likewise described 
under the crossref erencing section. 

in cur rent ... wherein an arriving video feed is recorded digitally and 
odiued before re-broadcast. 

Iz must also be noted here that in a case of sending separate streams 
!-*5no video and one annotation) via separate media, the signature 

process as described with 

r^ioronce co the section entitled Method and Apparatus for Combining and 
.'•"y.\ \hronizinq Separately Sourced Video-Stream Data must be applied after 
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Detailed Description 

. . . been added to this embodiment of the 

protocol, as shown in Table 5. First, the signature of A, SA, over MO is 
enhanced to include signature attributes, which are delivered along 
with the signature block, containing separate hash values for: (1) 
H(M) - placing the hash of the inner content, M, into the signature 
links A to M in the eyes of both B and the PO 240; 5 (2) H...M using K 
MO = Epo{A I B I MB X 
A - 4 B: M, , 
B: R = S B ( MO 

n -4 A: R Preferably a detached signature 

"-. : ve r i :: y R 

/■.■• i : : MO I X Send MB per basic version, along with 

•■: K':.. . and "A I B i MB X" Info to 

:• " :;:r.r,;CL MO 
r :.. i \ MO same . . . 
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Detai led Description 

T radi t ionai ly , the entire body of a virus has been wholly contained 
:,.r: one data stream. As a result, current virus detection technologies 
= ; ^ri.-n data stream for an entire virus signature and examine each 
stream for viruses independently of other data streams . 

! - u ! y developed operating systems and file formats include data 

Lilies chat are a collection of data streams. Examples of these 
en cities are Apple Macintosh files... each component resides in a 
different data stream, each of the first three viruses spans two data 
streams and the fourth virus spans three data streams . Scanning each 
data stream independently of other data streams for the entire 
virus signature of any of these viruses will not result in any of the 
viruses being detected. ...the other viruses, to the virus B/P 1. 
Therefore, if the probability is low that -the component B will be found 
in scanned data streams without the virus B/P I contaminating the 
data streams , the signature for the virus B/P I is the signature for 
component B (Component Sig/B) . If the probability is not low that 
component B will... 

...more components that is unique to the virus, the signature creator 
determines 245 whether the probability is low that the combination will 
exist in data streams without the virus existing. If the probability 
is low, the signature for the combination, which is logically in the 
norm of a Boolean expression, is used as the signature for the whole 
virus (step 250) . For. . . 
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Detailed Description 
. . . sent to the network 
6 0 . 



The sec of data transmi. ons constituting the transacti 
i • : v^-iei: r i c data 4 6, the transaction first data 50, and the 

■ a J. signature 58 may be sent as separate bitstreams and/or 
■:dra packets, or otherwise may be sent together by appending 
: r.^ associated data sequences using a concatenator, such as an 
z d-Jde r . . . 
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Detailed Description 

. . . compartment contains N bytes, the maximum number of key streams based 
upon a single pointer using sequential addresses to identify the bytes in 
each session signature is N. This o number is independent of the 
stream length desired. For n compartments, the 

maximum number of streams is Nn-1. Thus for four compartments each 
containing one million bytes, the maximum number of this invention, 
random pointers to different session signatures and a master signature 
can be used to obtain two separate key streams for full duplex (i.e. 
: wo way or bidirectional) operation. Each 

kf-y stream can be derived as described in any of the ways above. In...N 

key 

;: 5 stream segments each up to N bytes long from two randomly selected 
compartments each containing N bytes selected from a master signature . 

Figure 9 shows a duplex key stream where two separate key streams A 

and 

B are derived from the same master signature , each key stream though 

being independent of the other key stream . 

o 

Figure 1 0 shows the shared key bucket and DES key bucket embodiment 
where the DES key resides only in the security server and. . . 
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. . . is already assigned to the port by the action of the same node 
functioning as a Sender or a Tandem in the context of a separate 
restoration process. 

Each signature in the transmit queue has an associated HOLD FLAG, 
which indicates whether the signature is eligible for retransmission at a 
later time. 

As will be explained in FIGS... 
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... using a split signature procedure. 

FLoure 5 shows the relationship between a user, an 
. re network and multiple network computers, each 

• • ik computer having a separate access signature for 

communicating with the user, all access signatures 
.sf^ecced randomly from the same master signature 



Figure 6 shows a symmetric mode of operation where 

r wo network computers, each wi th ... master signature, the addresses 
■r : the access signature residing at network computer 
■1 / . Each sJ.de, now, is made equally responsible for 
.jivr.eraLing one of two separate parts of the session 

signature : each side transmits to the other the 
addresses only of the part of the session signature 
thai it has generated, upon completion of this 

c ransrnission from each side... same as in conjunction with Figure 4A. 

Figure 5 illustrates the operation of this 
invention in the asymmetric mode wherein one user with 
one master signature is able to communicate with 
multiple computers each having a separate access 
signature all randomly selected from the one master 
signature of the user. As shown in Figure 5, the user 
at terminal 50 has an I.D. as well as a master 
signature. The master... a particulr user 
from captured transmitted information, this alternative 
embodiment makes it even more difficult, if not 
impossible. Simply, it does not allow even the 

signature addresses to be transmitted without prior 
encryption. This alternative embodiment makes it even 
more practical to use simplified and more efficient 
security procedures and to utilize extremely simple and 
i: a s t . . . 



14/3, K/44 (Item 32 from file: 349) 

.*:A:X>G(R) File 349: PCT . FULLTEXT 

. • **004 W I PO/Uni ventio . All rts. reserv. 

;V l < [ j8939 '"''Image available** 

SYSTEM AND METHOD FOR RESOLVING SUBSTANTIALLY SIMULTANEOUS BI-DIRECTIONAL 

REQUESTS OF SPARE CAPACITY 
SYSTEME ET PROCEDE VISANT A RESOUDRE LES DEMANDES BIDIRECTIONNELLES 

PRATIQUE MENT SIMULTANEES DE CAPACITE DISPONIBLE 

Patent Applicant /Assignee : 

MCI COMMUNICATIONS CORPORATION, 
Inventor ( s ) : 

WILL Russ, 

Patent and Priority Information (Country, Number, Date) : 
Patent: WO 9641453 Al 19961219 

Application: WO 96US10491 19960607 (PCT/WO US9610491) 

Priority Application: US 95483578 19950607 
Designated States: CA JP MX AT BE CH DE DK ES FI FR GB GR IE IT LU MC NL PT 

SE " 

::~ I i ca t ion Language: English 
K'j: liexc Word Count: 5966 

M*.*::. International Patent Class: H04L-012/407 

E\ : * . \ ex t A v a liability: 
: - • a i 1 ed Description 

!' ailed Description 

. . . substantially the same time that a flooding 

> L :nature was sent by node 6 into the same link. Since node 5 is 
: ;i • forming its own arbitration independently of that being performed by 
:. .Je (■*., assume the flooding signature sent out by node 5 would have 
:* -hed node 6 by the end of 
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... three or more factors. Unless stated 

otherwise, all arithmetic operations are to be considered 
modulo N 

In the multi-step signature method, shares of a 
signature key al, a2, . . . . ab o are distributed to separate 

devices. A first device affixes a partial signature to a 
document by hashing the document (the symbol "H" will be used 
to designate the result of the hash operation) and 
exponentiating the hash. . . 
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. . . recipient, the user has the ability to scan the parcel bar 
code or enter the recipient's employee number, and to 
capture the recipient's signature . No separate stylus is 
required for screen data entry. Delivery information 
query management allows the user to obtain tracking 
information by date, by tracking number, or by 
employee name or number or location. Communication 
by . . . 
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with biometric techniques. This WO 96/02993 PCTIUS95/0907 6 
completeness in order to round out the "relative 
identity" concept, 

Authorisation Informgtion in Certificates 

Ar tributes may convey restrictions that control 

: r.e conditions under which a signature is valid. 

Without such restrictions, the risk of forgery would be 
considered excessive, since an electronic signature can 
be affixed to almost any digital document by anyone 
possessing ... s ignature capabilities already assumed can 
be expanded to provide a framework for this service. 

For notarization purposes, timestamps and location 
information will be included as signature attributes. 
Individual signature structures may either be detached 
and stored or, if desired, conveyed separately from the 
document . 

Multiple signatures or joint signatures on the 

document itself can also be distinguished from 



"countersignatures," wh are signatures on the 
signature structure in which they are found and not on... 
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. . . proceeds as previously indicated with the exception that 
each agent individually adds the current time data to the 
representative document it receives, certifies the 
resulting separate time-stamped receipt with its own 
verifiable cryptographic signature , and transmits the 
certificate back to the author. This transmittal may be 
directly to the requesting author or by way of the 
administrative TSA where the receipts... 
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fTaul t- tolerance is an important requirement in distributed computing 
systems. However, designing applications for distributed systems is a 
difficult task, particularly when components of the system can fail. The 
difficulty of this task increases with the severity of failures 
encountered. Arbitrary process failures are generally much harder to 
overcome than failures that are restricted, e.g., where processes only fail 
by halting. Thus, techniques that restrict the disruptive behavior of 
faulty processes can greatly simplify the design of fault-tolerant 
algorithms. Such techniques effectively provide reduction mechanisms from 
one class of failures to a more benign class. 

Message authentication is an example of a technique that imposes 
restrictions on the externally visible behavior of faulty processes. This 
technique has been used to derive simple solutions to many problems of 
fault-tolerance for systems with arbitary faults. To exploit the simplicity 
provided by authentication, we present communication primitives that 
provide properties of authentication without using digital signatures 
. These primitives can also be extended to provide properties beyond those 
of authentication, thereby further restricting the types of faults that 
have to be overcome. 

These communication primitives lead to a general methodology for 
: *:p.i nq f ault - tolerant algorithms. We first design an algorithm assuming 
■ ■■ r irossaqes are signed. Then, replacing signed communication in this 
: : I.;-- with our broadcast primitive automatically results in an 
* :.;'■■>. non - a u t hen t i ca t ed algorithm. We illustrate this methodology by 
: : r:-'w solutions to the problems of distributed agreement and clock 

v: -hroni za t ion in the presence of faults. Our solutions to the problems of 
Byzantine Agreement, early-stopping Byzantine Agreement, Byzantine 
Elections, and clock synchronization are simpler and more efficient than 
those previously known. Furthermore, the clock synchronization algorithm 
that we propose is the first one that achieves optimal accuracy with 
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exclusive. The solution^Kesented in this paper, however, offers the best 
of both worlds. Information transfer between relationships is controlled by 
individuals-yet transfers are incontestable. Two assumptions are made 
initially and relaxed later. The first, in the context of fixed sets of 
individuals and organizations, allows each individual at most one 
relationship per organization. Every such relationship is carried out under 
a unique 'account number' called a digital pseudonym. The items of 
information that an individual transfers between these pseudonymous 
relationships are called credentials. The second assumption is that only a 
p.-:r*. ir-ular organization, called Z, has the power to create pseudonyms or to 
:::S'.e credentials; nevertheless, Z learns no more about a person than do 
■ : -M organizations. The basic concept is introduced by analogy and then 
\ c:r\:\:a\ system using digital signatures is explained. How pseudonyms 
authorized is then detailed. After relaxing the two assumptions, the 
- : ;ihor illustrates the result with several applications. With the presented 
pro* ocols, individuals can transform one credential into another and obtain 
new credentials by combining and making choices among those they already 
have. Finally, building on these techniques the author achieves the quite 
general result of allowing people exclusive control over the database of 
alj their own relationships. (0 Refs) 
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Language: English Document Type: Conference Paper (PA) 
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Abstract: Manipulation detection codes (MDC) are defined as a class of 
checksum algorithms which can detect both accidental and malicious 
modifications of an electronic message or document. Although the MDC result 
must be protected by encryption to prevent an attacker from succeeding in 
substituting his own manipulation detection code (MDC) along with the 
modified text, MDC algorithms do not require the use of secret information 
such as a cryptographic key. Such techniques are therefore highly useful in 
allowing encryption and message authentication to be implemented in 
different protocol layers in a communication system without key 
management difficulties, as well as in implementing digital signature 
schemes. It is shown that cryptographic checksums that are intended to 
fraudulent messages should be of the order of 128 bits in length, 
• he ANSI X9. 9-1986 message authentication standard is criticized on 
*:.-:* :.:nsis. A revised 128-bit MDC algorithm is presented which overcomes 
■ r.' so-called triple birthday attack introduced by Coppersmith. A fast, 

: icienc implementation is discussed which makes use of the Intel 
d037/S0287 numeric data processor coprocessor chip for the IBM PC/XT/AT and 



s : ;;. i i. a r ■ n i. c r ocompu t e r s . Re f s ) 



■ ^rs: codes; cr y p u og r a ph y 

-.■ accidental modifications; high speed manipulation detection 

; ! K"; .-hecksum algorithms; malicious modifications; electronic message 
; ..r.er-L; encryption; message authentication; protocol layers; digital 
signature schemes; triple birthday attack; Intel 8087/80287; numeric data 
processor coprocessor chip 

Class Codes: B6120B (Codes); C1260 (Information theory); C6130 (Data 
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Abstract: In order to use fully the communication features of the 'office 
of the future' it will be necessary to authenticate documents in the way 
that a signature does, but even more securely. Several schemes for digital 
signatures have been published. The authors concentrate on true 
tures based on public key cryptosystems such as that of Rivest, Shamir 
-:f. : Adleman (1978) . Methods are proposed for signing documents of any 
. ori'.:fh wich a separate signature that can be sent separately , in 
principle, whether the document is enciphered or not. One method uses the 
DES cipher to form a 'digest' of the document for signature. The other uses 
the same kind of calculation as the RSA cipher and is therefore most useful 
when RSA hardware is available. The methods proposed have been devised to 
resist a number of types of forgery which defeat the more obvious schemes. 
Further criticism of the methods is welcomed. The authors continue with a 
discussion of the public organisation needed to support the widespread use 
of these signatures-a registry of public keys and a signature certification 
service. (8 Refs) 
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ABSTRACT: This paper considers the subliminal channel, hidden in an 



identification scheme^^Por transferring signatures. We observe the 
direct paralieli za t ion of the Fiat -Shamir identification scheme has a 
subliminal channel for the transmission of the digital signature . A 
positive aspect of this hidden channel supplies us how to transfer 
signatures without secure channels. As a formulation of such 
application, we introduce a new notion called privately recordable 
signature. The privately recordable signature is generated in an 
interactive protocol between a signer and a verifier, and only the 
verifier can keep the signatures although no third adversary can record 
the signatures. In this scheme, then the disclosure of the verifier's 
private coin turns the signer's signature into the ordinary digital 
signature which is verified by anybody with the singer's public key. 
The basic idea of our construction suggests the novel primitive that a 
transferring securely signatures without secret channels could be 
constructed using only one-way function ( without trapdoor) . (author 
abst . ) 
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Source: Computer Communications v 21 n 8 Jun 25 1998. p 771-776 

Publication Year: 1998 

CODEN: C0C0D7 ISSN: 0140-3664 

Language: English 

Document Type: JA; (Journal. Article) Treatment: T; (Theoretical) 
Journal Announcement: 9809W4 

Abstract: We propose a new group-oriented (t,n) threshold signature 
scheme that can withstand conspiracy attacks without attaching a secret 
number. The group's public key is determined by all members, each member 
signs a message independently and transmits the individual signature 
to a designated clerk who checks and integrates them into a group 
signature. A verifier can authenticate the group signature and trace back 
to find the signers. Further, we develop another threshold signature scheme 
without a trusted center. The proposed schemes possess all of the 
characteristics listed in Harn's scheme and are more difficult to break. 
(Author abstract) 18 Refs. 

Descriptors: *Data communication systems; Cryptography; Security of data 
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Journal Announcement: 9612W2 

Abstract: Access methods based on signature files can largely benefit 
from possibilities offered by parallel environments. To this end, an 
effective declustering strategy that would distribute signatures over a 
sec of parallel independent disks has to be combined with a synergic 
- 1 i;s;:erinq which is employed to avoid searching the whole signature file 

cXccuiing a query. This article proposes two parallel signature file 
• : .:. : .r :cns, Hamming Filter (HF) and Hamming** plus Filter (H** plus F) , 
: ■• :n:non declustering strategy is based on error correcting codes, and 

■; ..^Lerincj is achieved by organizing signatures into fixed-size 
: . ■-.v-s, edcn containing signatures sharing the same key value. HF 
^locates signatures on disks in a static way and works well if a correct 
relationship holds between the parameters of the code and the size of the 
file. H* A plus F is a generalization of HF suitable to manage highly 
dynamic files. It uses a dynamic declustering, obtained through a sequence 
of codes, and organizes a smooth migration of signatures between disks so 
that high performance levels are retained regardless of current file size. 
Theoretical analysis characterizes the best-case, expected, and worst-case 
behaviors of these organizations. Analytical results are verified by 
experiments on prototype systems. (Author abstract) 27 Refs. 
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Correlated-wavef orm multiple-access (CWMA) is a multiuser signaling 
scheme for mobile/cellular wireless communications which encompasses TDMA, 
EDM A, and CDMA (code-division multiple-access). A CWMA system is one in 
which each independent user modulates a signature waveform, and these 
waveforms are generally correlated with each other. 

We present a generalized fading diversity model for CWMA channels, 
which unifies several previous approaches to diversity. Performance bounds 
are derived for the pre-combining group detector, which operates on the 
CWMA diversity channel. A new measure for analyzing such systems, the 
inuerasymptotic SNR gap, is also presented. The Group Metric Decoder, a new 
reduced-complexity decoder, is developed for jointly detecting and decoding 
users over the CWMA diversity channel. This decoder operates by assuming 
knowledge of only a subset of the users' codes. Performance bounds for this 
decoder are derived, and a new technique for bounding bit-error 
probabilities for fading channels is presented. 

: r. order to analytically characterize the frequency content of CWMA 
h:\ i i.-.ner types of signals, we introduce a new class of generalized 
:.«:;jw:dth measures, of which RMS bandwidth and fractional out-of-band power 
.-ir« special cases. These measures are defined in terms of a frequency 
wciLjhLing function. The key feature of such measures is their relation to a 
special eigenvalue/eigenf unction equation which generates an associated 
minimum-bandwidth signal basis. 

Using this minimum-bandwidth basis, we present new results for 
bandwidth-constrained CWMA signature waveform design. First, we 
characterize signal sets whose bandwidth is independent of the received 
power distribution . Such signature waveforms have a 

“ location-invariant ” bandwidth. Restricting attention to this 
class of waveforms, we present signal design procedures which maximize 
channel capacity under generalized bandwidth constraints. Coded and uncoded 
performance is maximized for signals which are, in general, correlated. 
Further, because of the construction of the generalized bandwidth measures, 
all of the signal design procedures optimized for one bandwidth measure can 
be easily reworked for another bandwidth measure in the class. 
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Abstract: Electronic documentation and the communication of these 
documents have become an integral part of our society. The ease with which 
vhese documents can be generated, copied, changed and communicated forms 
'-.he main reason for its success. Sadly, these same attributes also form its 
A':n: lies heel. Electronic documents are so easy to generate, copy, change 
-::v.i communicate , that the authenticity of such documents is at stake. The 
w; , - en signature provides the necessary authentication in the case of 
r-aper documents. Without an electronic counterpart for the written 
signature , the electronic documentation and communication system may 
collapse as fast as it has grown. This article provides a survey of message 
authentication techniques which can be used to authenticate electronic 
information. It focuses on the use of public key ciphers to implement an 
authentication scheme. (19 Refs) 
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Abstract: A server-aided secret computation protocol (SASC) is a method 
•r allows a client: (e.g. smart card) to compute a function efficiently 
: lie aid of a powerful server (e.g. compute) without revealing the 
's secrets to the server. T. Matsumoto et al. (1988) proposed a 

,j:ion co the problem which is suitable for the RSA cryptosystem . S. 
Kawamura et al. (1989) have shown that a client with a 10/sup 5/ times more 
powerful server's aid, can compute an RSA signature 50 times faster than 
the case without a server if the communication cost can be ignored. The 
authors propose two SASC protocols based on the addition sequence to 
improve the efficiency. In the first protocol, since the addition sequence 
is determined by the server, it can improve the computational efficiency of 



si--ve:: only and il^Ks suitable for the low speed communication link 
9.6 Kbps). It is expected that a client, with a 8982 times more 
:.;owe r i'u.l server's aid, can compute an RSA signature 50 times faster than 
::he case without a server. In the second protocol, since the addition 
sequence is determined by the client, it can improve the computational 
efficiency of the client and sever simultaneously but takes more 
communication time and it is suitable for the high speed communication link 
(e.g. above 10 Mbps). It is expected that a client, with a 3760 times more 
powerful server's aid, can compute an RSA signature 200 times faster than 
the case without a server. (11 Refs) 
Subfile: B C 

Descriptors: cryptography; protocols 
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signature; communication time 
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\: :. r --.k:c : The performance of synchronous and asynchronous, binary and 

quaternary (with and without offset) direct-sequence spread-spectrum 
multiple-access communication systems employing random signature 
sequences and arbitrary chip waveforms is investigated. The average 
probability of error at the output of the correlation receiver is 
evaluated using a characteristic- function approach for all the above 
systems. Numerical results are presented that illustrate performance 
comparisons between systems employing random and deterministic 
signature sequences, synchronous and asynchronous systems, systems with 
rectangular or sinewave chip waveforms, and binary quaternary systems 
with the same data rates and bandwidth. In all cases, the accuracy of 
the Gaussian approximation is also examined. 
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ACM Transactions on Information Systems v. 15 (July '97) p. 291-320 
DOCUMENT TYPE: Feature Article ISSN: 1046-8188 LANGUAGE: English 
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ABSTRACT: Methods for the rapid hashing of consecutive n-grams, using a 
recursive hash function, are discussed. The power-of-2 integer division 
method was found to give the best mean uniformity, while the integer 
division methods are the most erratic in distribution, often producing the 
flattest distributions, but occasionally producing the poorest ones. 
Polynomial division is more general and is more suited to longer n-grams 
than hashing by cyclic polynomials, but the use of cyclic polynomials holds 
a slight edge in uniformity and in speed. Of the 4 methods outlined, 
recursive hashing by polynomial division or cyclic polynomials provides the 
most rapid processing, without sacrificing near-ideal hash value 
distribution . 
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-he key (the truly paranoid might obtain the author's key from any 
: nuinoer of public keyservers or from the author) . 

The SecureDrive distribution contains a set of separate 
signature files chat correspond to the executables. By supplying the name 
oi the respective signature and executable files on the command line, PGP 
can verify quickly... 
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Sullivan, Eamonn 

PC Week, vll, n34, p83(3) 

August 29, 1994 
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. . . concents of the document (typically with some kind of hash function 

or checksum) and then encrypts that number with his or her private key. The 
signature can be embedded in a document or sent in a separate file. 
To verify that a document was signed by the sender and has not been 
-i liered since it was signed, the recipient looks up the... 
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... safeguards at every point of the process. The caller needs a 

password to view the document remotely; the signature and the document are 
encrypted before transmission so they cannot be intercepted or 
reproduced; each signature must be created and transmitted separately 
, so one remote signature can't be used to sign more than one document. 

This system will let anyone sign a document remotely as long as they 
.-a n est abl ish . . . 
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...ABSTRACT: compresses test results when testing complex devices but has 
a probability of aliasing errors that are characteristic of linear feedback 
shift registers (LFSR) . An evaluation independent of error distribution 
dependency in the analyzed sequence does not prohibit signature analysis 
use but benefits by using larger than usual LFSRs , such as length 32. The 
technique behind the evaluation is called a priori randomization and... 
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. . . distributes product to the department, gift, specialty and mass 

Mr ; :»;.s both in the United States and Canada through a network of both 
.in -house and independent representatives and distributors . Signature 
Group is based in Minneapolis with offices in LA and manufacturing 
worldwide including Hong Kong, Dominican Republic and Los Angeles. They can 
be found at... 
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. . . Castanet to distribute, update, and manage its Internet access 

srr'ware based upon Castanet's built-in security features, bandwidth 

ency, scalability, personalization, and support for disconnected 

" Distributing our signature service over the Internet presented a 
• w of challenges which Castanet helped us to solve. It has an 

remei y robust architecture that is very... 
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strategic relationships with such industry leaders as La-Z-Boy, 
Kincaid Furniture, QVC, Warner Books, Hallmark and Avon. 

Raasch also described the Company's branded distribution strategy, 
which consists of Company- owned Thomas Kinkade stores, independently 
owned Signature Galleries, showcase dealers and wholesale dealers. The 30 
Thomas Kinkade Stores and 162 Signature Galleries sell Thomas Kinkade 
products exclusively, while more than 2,500... 
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or. i.he OZ-7000 and 02-8000 Wizard series. The new cards 
are designed to use the full size screen of the OZ-8000/8200 
Signature Series Wizards. 

"Opening up the Wizard serial communication architecture to 

independents and providing EPROM and BASIC IC cards will turn an 
already accomplished business tool into a customized pocket product, 
with a customizable keyboard," says John... 
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i i: through the FMS- 
~v00 1 s electronics module. The captured signature is displayed 
immediately on the screen for checking, and after acceptance, the 
FMS-300 transfers the signature directly into the user's central 
computer system. Separate photographic and signature file storage 
equipment are eliminated, and FMS requires no additional branch 
controller devices . 

FMS-300 intergrates with the other systems in Lundy-Farrington ' s FMS 
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. . . Castanet to distribute, update, and manage its Internet access 

software based upon Castanet's built-in security features, bandwidth 
efficiency, scalability, personalisation, and support for disconnected 

use . 

" Distributing our signature service over the Internet presented a 
r-.-'W of challenges which Castanet helped us to solve. It has an 

i . : o-nel y robust architecture chat is very... 
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...and making mobile communication networks safer for confidential business 
to be conducted. It is expected that the technology will be available for 
new generation mobile communication networks in the future. Sonera's 
digital signature solution is independent of phone operators and card 
and telephone manufacturers. 
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... process online. 

Currently, Vanguard's on-line customers who want to set up another 
account need to request the written materials, complete the forms and send 

in a separate physical signature to the company, authorizing the new 
account. Under the new system, the physical signature that was filed with 
Vanguard to establish the original account will... 
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...during a joint appearance with Senate Majority Leader Lott on NBC's 
"Meet che Press", Republicans "would agree to let these insurance reforms 
be passed separately and sent to the president" for his presumed 
signature . Democrats then would agree to allow a vote on a separate bill 
creating tax-sheltered MSAs that Republicans have tried to include in the 
portability bill. "The strategy of separating the issues broke the recent 
Senate . . . 
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... 2/14/94, pi)/ the letter represents the strongest political 

c ha 1 1 e ng e yet to the ROS . 

Meanwhile, Senate Majority Leader George Mitchell (D-ME) pulled his 
signature from the letter, and Department of Transportation Secretary 
Kedenco clarified separately that he is not opposed to the ROS. 

"We are writing to make clear our opposition to the EPA's proposed 
rule to mandate the... 
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... songs from Boston-area female singer /songwriters , such as Juliana 

Hatfield, Mary Lou Lord, and Melissa Ferrick {Billboard, Jan. 23) . The set 
was released on independent label Signature Sounds, distributed by 

K';r:h International. 

The organization and album have since received high-profile support, 
-\:.-::r\o exposure via MTV, VH1, and Lilith Fair (Billboard, May 29). 
" V espond . . . 



8/3,K/16 (Item 2 from file: 16) 

DIALOG (R) File 16:Gale Group PROMT ( R) 

(c) 2004 The Gale Group. All rts. reserv. 

04775041 Supplier Number: 47028703 (USE FORMAT 7 FOR FULLTEXT) 
Market Expands For Indie Folk Labels 

Horak, Terri 
Billboard, pi 
Jan 11, 1997 

Language: English Record Type: Fulltext 
Document Type: Magazine/Journal; General 
Word Count : 1514 



Olsen, president/founder of Signature Sounds, a label that 



specializes in musicians «ied around its Northhampton, Mass., home base, 
supports the pooling of resources for independents within the 
special-interest group. 

Signature Sounds signed a distribution deal with Koch 
International in September 1996 and has just released its first sampler, 
which will be included in the February issue of roots music... 
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Ar-rTKAC'T : 

!a trie's plan to increase cellular phone sales by limiting 

.M sr. r i bunion of high-end cellular phones has angered many distributors . 

The plan, dubbed the Signature program, stipulates that cellular carriers 

and independent retailers meet certain conditions, in return for selling 

Motorola's $1,300 StarTAC phone loaded with high-end features. Motorola 
requires that distributors must put... 
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. . . Dec. 21 and the House on Dec. 22 gave final approval to the ICC 

Sunset Act of 1995, sending it to President Clinton for his signature . 

The legislation creates a new independent Surface Transportation 
r^rc wir.hin the Department of Transportation that will handle those 
: : ; : i-nci motor carrier functions not repealed by Congress. DOT will 
3 ::■■■' jurisdiction over the. . . 
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. . . great opportunity. We believe that his jeans line can be very 

important, ' Gerani said. 

A key element in Bensoussan's recovery strategy has been to separate 
the creation and distribution of Lacroix' s different apparel collections. 

The signature line is licensed to Mendes, the top-quality apparel 
maker that also manufactures Yves Saint Laurent's Rive Gauche. Bazar is 
sourced from the Loire... 
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... custom-designed shirts with hole-designs printed across the front. 

YEAR ENTERED GOLF BUSINESS: 1991 
PRODUCT CATEGORIES: Apparel 

NEW FOR 1993: Shirts for clubs with signature hole printed on shirt 
SALES REPS: 12 independent 

DISTRIBUTION : On- and off-course 
TERMS: Net 30 

ADVERTISING CAMPAIGN: Golf Pro Merchandiser, Golf Shop Operations, 
Sarasota Magazine 

ADVERTISING THEME: 'Style has no handicap.' 
SPECIAL PROMOTIONS... 
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Jury remains out on how broadcasters will approach TV violence bill (S-593) 
chac at week's end was awaiting President Bush's signature , Assn. of 
Independent TV Stations (INTV) and National Assn. of Broadcasters (NAB) 
said. Bill would give broadcast, cable and film industries temporary waiver 
of antitrust laws to develop voluntary program guidelines. "Will the 
television industry use... 
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Any parent or preparer who supplied information must sign the form, 
or it will be returned unprocessed. Those filling out an online FAFSA must 
send in a separate signature page; this attests to the form's accuracy 
and allows schools to receive your report. Save a copy of your application 
and work sheets, which... 
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Burke, who was 10 years old when TBS started in 1976, will be 
responsible for developing the network's signature broadcasting as the 
nation's top independent station. 

Given his family roots, it was an all but foregone conclusion that 
Burke would someday work in the broadcast business. His father, Daniel 
Bu r ke . . . 
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. . . great opportunity. We believe that his jeans line can be very 

important, " Gerani said. 

A key element in Bensoussan's recovery strategy has been to separate 
the creation and distribution of Lacroix' s different apparel 
collections . 

The signature line is licensed to Mendes, the top-quality apparel 
maker that also manufactures Yves Saint Laurent's Rive Gauche. Bazar is 
sourced from the Loire. . . 
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... Monaco said. "We just allow it to come in as a piggyback." 

State officials then pull the information from the directory for 
their state. The transmitter of the tax returns sends separate 
signature documents to the IRS and the state. 

FedState saves the states money and time, Idziak said. "The IRS 
basically acts as a post office," she... 
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. . . see chat out of this terrible tragedy comes something good--people 

helping each other." 

HFMA National staff has supported Broadway and the Disaster Fund by 
distributing two separate fund-raising letters. 

The first letter bore Broadway's signature and was sent to the 
<::•::--'? HFMA Florida membership. HFMA National staff volunteers had the 

em; printed, stuffed the envelopes, and mailed the letters. 

The. . . 
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... Name of Immediate Supervisor: Have 

you applied to Archdiocese of Miami for basic press 

credential? IS 50 PERCENT NON-REFUNDABLE DEPOSIT: 

A. { ) Included 

or 

B. ( ) Sent under separate cover 



Signature of Applicant 

For Office Use Only 

/PRNewswire -- April 21/ 
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. . . as quadriphase shift keying, do not yield periodic components on 

being squared, but rather cause an expansion of bandwidth. Therefore, they 
may be preferred for signature intercept -resistant transmission . 

A somewhat independent approach to LPI has sprung up around the 
phenomenon of oxygen absorption of electromagnetic energy in the 
atmosphere. Atmospheric gases, including water vapor, absorb radiation... 
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...TEXT: i:o take advantage of Windows, distributed processing, relational 
;-ia* abase, and install a Y2K application," said Jacques. "Lastly, we wanted 
: ' > chanqe our method of archiving, distributing , and viewing signature 
.v:r*':s r r0 m microfiche to imaging." 



A-':cer conducting an independent evaluation of document imaging systems 
chat met the necessary criteria, St. Johns selected OnBase Information 
Management System,- from Hyland Software Inc. "The single most important... 
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...TEXT: verify the sender's authenticity. It's loosely based on complex 
mathematical factoring. 

Over at Berkeley in 1975, Merkle had formed the problem of secure 
communication independent of signature and certificate. He was 

3 - * -.i-:k Lncj the distribution of the public key based on random numeric 
..- ; -s as his premise. When he read the Hellman-Dif f ie paper, Merkle 
-> .: \.p Mellman, who talked. . . 
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...TEXT: the bet, Landor proposed another unorthodox idea--a new "X," kind 



"of a second corporate lc^^ f or promotional/marketing uses. It will "float" 
in Xerox communications , separate for the time being from the principal 
signature --the identity equivalent of an employee on trial. 

I AM NOT SURE whether to credit Sanford I. Weill for lowest-cost identity 
programs (he buys. . . 
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: v ; des clients with resource augmentation and advanced technology 
.--.ol.uLi.ons co business problems, including its industry-leading 
solution to the millennium date-change problem, Signature 2000 (tm) . 
Through independent distributors , products are also available in 
Europe, Australia, Latin America, Asia, Africa, and the Middle East. 

CONTACT: Princeton Softech, Inc. 

David Craig, Joe Allegra 
(800) 457... 



8/3,K/34 (Item 2 from file: 810) 

DIALOG (R) File 810: Business Wire 

(c) .1999 Business Wire . All rts. reserv. 

0835232 BW1607 

COMPUTER HORIZONS: Year 2000 Wire/Computer Horizons, Mercury Interactive 
Leverage Strengths to Improve Year 2000 Testing 

April 14, 1998 

!-:yline: Bus iness /Technology Editors 

... wo rid wide . 1 1 

l r-^vides clients with resource augmentation and advanced technology 

ions co business problems, including its industry-leading 
so', j' son lo the millennium date-change problem, Signature 2000. 
/h rough independent distributors , products are also available in 
Europe, Australia, Latin America, Asia, Africa, and the Middle East. 
E-mail address for more information is: inf ormation@chc . f abrik . . . 



